Am Donnerstag, 13. Juli 2017, 16:22:32 CEST schrieb Christian Langrock: Hi Christian, > With this patch it's possible to use crypto user API form all > network namespaces, not only form the initial net ns. Is this wise? The crypto_user interface allows root users to change settings in the kernel with a global scope. For example, you can deregister ciphers, change the prio of ciphers and so on. All of that is visible on a global scale and thus should not be possible from namespaces, IMHO. Ciao Stephan
