]> git.baikalelectronics.ru Git - kernel.git/commit
netfilter: ipvs: make global sysctl readonly in non-init netns
authorAntoine Tenart <atenart@kernel.org>
Tue, 12 Oct 2021 14:54:37 +0000 (16:54 +0200)
committerPablo Neira Ayuso <pablo@netfilter.org>
Thu, 14 Oct 2021 21:08:35 +0000 (23:08 +0200)
commite6083970cca1c50c498cc999e380469352b4fd19
treebe6c0a505440acf0c3004538f3c972a3f82ef272
parent73382d7d0369649643b493f2b0b5b8d178f5efcf
netfilter: ipvs: make global sysctl readonly in non-init netns

Because the data pointer of net/ipv4/vs/debug_level is not updated per
netns, it must be marked as read-only in non-init netns.

Fixes: 9f010cc4336e ("IPVS: netns, final patch enabling network name space.")
Signed-off-by: Antoine Tenart <atenart@kernel.org>
Acked-by: Julian Anastasov <ja@ssi.bg>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
net/netfilter/ipvs/ip_vs_ctl.c