Alexey Dobriyan wrote:
proc and sysctl are stubbed to init_net's value, that's for later. Note: conntracks are recycled RCU-way, netns as well. During destruction, conntrack count of netns is decremented. I'm not sure it's not racy and it will not decrement in freed netns since conntrack doesn't pin netns (and pinning it is out of question). Probably, decrement should be moved earlier. FWIW, I haven't seen this race (if it exists at all). But my cloning proggie sucks big way, so don't count on me. :^)
Since conntrack cleanup is invoken from netns cleanup while the namespace still exists, this shouldn't happen. The conntrack cleanup doesn't return until all entries are freed, creation of new entries is prevented by unregistering the hooks previously, at least without namespaces. Mhh ok, actually this can happen since the hooks don't seem to be per namespace. In that case, making sure that all devices from that namespace are unregistered previously should have the same effect. -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
