While flags SYSLOG_ACTION_CONSOLE_ON/OFF/LEVEL of console actin are used in syslog syscall, the related hanlding should be targeted at host by init_syslog_ns. Signed-off-by: Rui Xiang <rui.xiang@xxxxxxxxxx> --- kernel/printk.c | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/kernel/printk.c b/kernel/printk.c index ca951e7..bdb7ed4 100644 --- a/kernel/printk.c +++ b/kernel/printk.c @@ -373,6 +373,11 @@ static int check_syslog_permissions(int type, bool from_file, if (from_file && type != SYSLOG_ACTION_OPEN) return 0; + if (type == SYSLOG_ACTION_CONSOLE_OFF + || type == SYSLOG_ACTION_CONSOLE_ON + || type == SYSLOG_ACTION_CONSOLE_LEVEL) + ns = &init_syslog_ns; + if (syslog_action_restricted(type, ns)) { if (ns_capable(ns->owner, CAP_SYSLOG)) return 0; -- 1.8.2.2 -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html