diff options
| author |   David S. Miller <davem@davemloft.net> | 2016-08-14 21:09:11 -0700 |
|---|---|---|
| committer | David S. Miller <davem@davemloft.net> | 2016-08-14 21:09:11 -0700 |
| commit | a878c020172a7cd9fb2f691b95e2c30084a50cb4 (patch) | |
| tree | ad2cc7b3534b8767f507caf65b093fe4fca43fa9 /drivers/net/ethernet/chelsio/cxgb4/cxgb4_main.c | |
| parent | net: phy: initialize rc to zero to avoid returning garbage value (diff) | |
| parent | net: make net namespace sysctls belong to container's owner (diff) | |
| download | linux-dev-a878c020172a7cd9fb2f691b95e2c30084a50cb4.tar.xz linux-dev-a878c020172a7cd9fb2f691b95e2c30084a50cb4.zip | |
Merge branch 'proc-per-ns'
Dmitry Torokhov says:
====================
Make /proc per net namespace objects belong to container
Currently [almost] all /proc objects belong to the global root, even if
data belongs to a given namespace within a container and (at least for
sysctls) we work around permssions checks to allow container's root to
access the data.
This series changes ownership of net namespace /proc objects
(/proc/net/self/* and /proc/sys/net/*) to be container's root and not
global root when there exists mapping for container's root in user
namespace.
This helps when running Android CTS in a container, but I think it makes
sense regardless.
Changes from V1:
- added fix for crash when !CONFIG_NET_NS (new patch #1)
- addressed Eric'c comments for error handling style in patch #3 and
added his Ack
- adjusted patch #2 to use the same style of erro handling
- sent out as series instead of separate patches
====================
Signed-off-by: David S. Miller <davem@davemloft.net>
Diffstat (limited to '')
0 files changed, 0 insertions, 0 deletions