]> git.baikalelectronics.ru Git - kernel.git/commit
netfilter: conntrack: do not dump other netns's conntrack entries via proc
authorLiping Zhang <liping.zhang@spreadtrum.com>
Mon, 15 Aug 2016 13:50:35 +0000 (21:50 +0800)
committerPablo Neira Ayuso <pablo@netfilter.org>
Wed, 17 Aug 2016 15:41:58 +0000 (17:41 +0200)
commit52dee64ed63612fa6f3b10c1937d0d00bd1d59a4
treede6d9d933936650e25f957ba5084a582fd709c05
parent9f204b06d8a1e2ca6ab0c991358adddfd7d27c59
netfilter: conntrack: do not dump other netns's conntrack entries via proc

We should skip the conntracks that belong to a different namespace,
otherwise other unrelated netns's conntrack entries will be dumped via
/proc/net/nf_conntrack.

Fixes: b4ee11851a55 ("netfilter: conntrack: use a single hashtable for all namespaces")
Signed-off-by: Liping Zhang <liping.zhang@spreadtrum.com>
Reviewed-by: Florian Westphal <fw@strlen.de>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
net/netfilter/nf_conntrack_standalone.c