]> git.baikalelectronics.ru Git - kernel.git/commit
[NET]: Modify all rtnetlink methods to only work in the initial namespace (v2)
authorDenis V. Lunev <den@openvz.org>
Fri, 30 Nov 2007 13:21:31 +0000 (00:21 +1100)
committerDavid S. Miller <davem@davemloft.net>
Mon, 28 Jan 2008 22:54:24 +0000 (14:54 -0800)
commit90cec5e432ecf52921edd9f296f006a3b98f8c6e
treec90c74b9ec068453881f1173da4c57d6bb00a7d9
parentb1a81f2c668d7ff54e6800bb27dd5a43ae8f79ed
[NET]: Modify all rtnetlink methods to only work in the initial namespace (v2)

Before I can enable rtnetlink to work in all network namespaces I need
to be certain that something won't break.  So this patch deliberately
disables all of the rtnletlink methods in everything except the
initial network namespace.  After the methods have been audited this
extra check can be disabled.

Changes from v1:
- added IPv6 addrlabel protection

Signed-off-by: Denis V. Lunev <den@openvz.org>
Signed-off-by: Eric W. Biederman <ebiederm@xmission.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
18 files changed:
net/bridge/br_netlink.c
net/core/fib_rules.c
net/core/neighbour.c
net/core/rtnetlink.c
net/decnet/dn_dev.c
net/decnet/dn_fib.c
net/decnet/dn_route.c
net/decnet/dn_table.c
net/ipv4/devinet.c
net/ipv4/fib_frontend.c
net/ipv4/route.c
net/ipv6/addrconf.c
net/ipv6/addrlabel.c
net/ipv6/ip6_fib.c
net/ipv6/route.c
net/sched/act_api.c
net/sched/cls_api.c
net/sched/sch_api.c