On Fri, Sep 25, 2020 at 11:56:02AM +0300, Vasily Averin wrote: > Currently netadmin inside non-trusted container can quickly allocate > whole node's memory via request of huge ipset hashtable. > Other ipset-related memory allocations should be restricted too. Applied, thanks.
