Re: [Devel] [PATCH 1/5] net: Modify all rtnetlink methods to only work in the initial namespace

2007-10-10 Thread Eric W. Biederman
"Denis V. Lunev" <[EMAIL PROTECTED]> writes: > Eric W. Biederman wrote: >> Before I can enable rtnetlink to work in all network namespaces >> I need to be certain that something won't break. So this >> patch deliberately disables all of the rtnletlink methods in everything >> except the initial n

Re: [Devel] [PATCH 1/5] net: Modify all rtnetlink methods to only work in the initial namespace

2007-10-10 Thread Denis V. Lunev
Daniel Lezcano wrote: > struct net *net = in?in->nd_net:out->nd_net; > >> So, we are bound to the following options: >> - perform additional non-uniform hacks around to place 'struct net' into >> other and other structures like xt_target >> - add 7th parameter here and over >> - introduce an skb

Re: [Devel] [PATCH 1/5] net: Modify all rtnetlink methods to only work in the initial namespace

2007-10-10 Thread Daniel Lezcano
Denis V. Lunev wrote: Eric W. Biederman wrote: Before I can enable rtnetlink to work in all network namespaces I need to be certain that something won't break. So this patch deliberately disables all of the rtnletlink methods in everything except the initial network namespace. After the method

Re: [Devel] [PATCH 1/5] net: Modify all rtnetlink methods to only work in the initial namespace

2007-10-10 Thread Denis V. Lunev
Eric W. Biederman wrote: > Before I can enable rtnetlink to work in all network namespaces > I need to be certain that something won't break. So this > patch deliberately disables all of the rtnletlink methods in everything > except the initial network namespace. After the methods have been > aud

[PATCH 1/5] net: Modify all rtnetlink methods to only work in the initial namespace

2007-09-28 Thread Eric W. Biederman
Before I can enable rtnetlink to work in all network namespaces I need to be certain that something won't break. So this patch deliberately disables all of the rtnletlink methods in everything except the initial network namespace. After the methods have been audited this extra check can be disab