From: Hangbin Liu <liuhang...@gmail.com> Date: Thu, 9 May 2019 14:55:07 +0800
> With NET_ADMIN enabled in container, a normal user could be mapped to
> root and is able to change the real device's rx filter via ioctl on
> vlan, which would affect the other ptp process on host. Fix it by
> disabling SIOCSHWTSTAMP in container.
>
> Fixes: a6111d3c93d0 ("vlan: Pass SIOC[SG]HWTSTAMP ioctls to real device")
> Signed-off-by: Hangbin Liu <liuhang...@gmail.com>
Applied and queued up for -stable.
