From: Stephen Hemminger
Date: Mon, 13 Nov 2017 07:37:38 -0800
> The restriction came from earlier discussion with Kees and Eric.
> The security folks are paranoid about containers allowing loading
> of modules. Probably CAP_SYS_MODULE is enough to control this already.
People running tests in na
On Mon, 13 Nov 2017 10:27:00 +0900 (KST)
David Miller wrote:
> From: Stephen Hemminger
> Date: Fri, 10 Nov 2017 10:26:37 +0900
>
> > Make default TCP default congestion control to a per namespace
> > value. The congestion control setting of new namespaces is inherited
> > from the root namespac
From: Stephen Hemminger
Date: Fri, 10 Nov 2017 10:26:37 +0900
> Make default TCP default congestion control to a per namespace
> value. The congestion control setting of new namespaces is inherited
> from the root namespace. Modules are only autoloaded in the root namespace.
>
> Signed-off-by: S