Liping Zhang <zlpnobody@xxxxxxx> wrote:
> From: Liping Zhang <liping.zhang@xxxxxxxxxxxxxx>
>
> We should skip the conntracks that belong to a different namespace,
> otherwise other unrelated netns's conntrack entries will be dumped via
> /proc/net/nf_conntrack.
>
> Fixes: 56d52d4892d0 ("netfilter: conntrack: use a single hashtable for all namespaces")
> Signed-off-by: Liping Zhang <liping.zhang@xxxxxxxxxxxxxx>
Thanks for the fix.
Reviewed-by: Florian Westphal <fw@xxxxxxxxx>
--
To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
