Re: [PATCH net-next] tcp: Namespace-ify sysctl_tcp_default_congestion_control

2017-11-14 Thread David Miller
From: Stephen Hemminger Date: Mon, 13 Nov 2017 07:37:38 -0800 > The restriction came from earlier discussion with Kees and Eric. > The security folks are paranoid about containers allowing loading > of modules. Probably CAP_SYS_MODULE is enough to control this already. People running tests in na

Re: [PATCH net-next] tcp: Namespace-ify sysctl_tcp_default_congestion_control

2017-11-13 Thread Stephen Hemminger
On Mon, 13 Nov 2017 10:27:00 +0900 (KST) David Miller wrote: > From: Stephen Hemminger > Date: Fri, 10 Nov 2017 10:26:37 +0900 > > > Make default TCP default congestion control to a per namespace > > value. The congestion control setting of new namespaces is inherited > > from the root namespac

Re: [PATCH net-next] tcp: Namespace-ify sysctl_tcp_default_congestion_control

2017-11-12 Thread David Miller
From: Stephen Hemminger Date: Fri, 10 Nov 2017 10:26:37 +0900 > Make default TCP default congestion control to a per namespace > value. The congestion control setting of new namespaces is inherited > from the root namespace. Modules are only autoloaded in the root namespace. > > Signed-off-by: S