Re: [PATCH RESEND net-next] net: Make tcp_allowed_congestion_control readonly in non-init netns

Hi Dave, It looks like this patch is on "net", "net-next", and Linus' tree (as commit 97684f0970f6). Additionally, gregkh has queued it up for the 5.10 and 5.11 stable trees. But it still shows up in Patchwork as "Needs ACK". Is there anything I need to do? Thanks, Jonathon

[PATCH RESEND net-next] net: Make tcp_allowed_congestion_control readonly in non-init netns

lowed, available}_congestion_control in non-initial netns") Signed-off-by: Jonathon Reinhart --- net/ipv4/sysctl_net_ipv4.c | 16 +--- 1 file changed, 13 insertions(+), 3 deletions(-) diff --git a/net/ipv4/sysctl_net_ipv4.c b/net/ipv4/sysctl_net_ipv4.c index a09e466ce11d..a62934b

Re: [PATCH] net: Make tcp_allowed_congestion_control readonly in non-init netns

On Tue, Apr 13, 2021 at 2:23 PM Jakub Kicinski wrote: > > On Tue, 13 Apr 2021 03:08:48 -0400 Jonathon Reinhart wrote: > > Fixes: 9cb8e048e5d9: ("net/ipv4/sysctl: show tcp_{allowed, > > available}_congestion_control in non-initial netns") > > nit: no semic

[PATCH] net: Make tcp_allowed_congestion_control readonly in non-init netns

lowed, available}_congestion_control in non-initial netns") Signed-off-by: Jonathon Reinhart --- net/ipv4/sysctl_net_ipv4.c | 16 +--- 1 file changed, 13 insertions(+), 3 deletions(-) diff --git a/net/ipv4/sysctl_net_ipv4.c b/net/ipv4/sysctl_net_ipv4.c index a09e466ce11d..a62934b

[PATCH net-next 2/2] netfilter: conntrack: Make global sysctls readonly in non-init netns

Fixes: d0febd81ae77 ("netfilter: conntrack: re-visit sysctls in unprivileged namespaces") Signed-off-by: Jonathon Reinhart --- net/netfilter/nf_conntrack_standalone.c | 10 ++ 1 file changed, 2 insertions(+), 8 deletions(-) diff --git a/net/netfilter/nf_conntrack_standalone.c b/net

[PATCH net-next 1/2] net: Ensure net namespace isolation of sysctls

-by: Jonathon Reinhart --- net/sysctl_net.c | 48 1 file changed, 48 insertions(+) diff --git a/net/sysctl_net.c b/net/sysctl_net.c index d14dab8b6774..f6cb0d4d114c 100644 --- a/net/sysctl_net.c +++ b/net/sysctl_net.c @@ -115,9 +115,57 @@ __init

[PATCH net-next 0/2] Ensuring net sysctl isolation

kernel log. [1]: https://github.com/opencontainers/runc/issues/2826 Jonathon Reinhart (2): net: Ensure net namespace isolation of sysctls netfilter: conntrack: Make global sysctls readonly in non-init netns net/netfilter/nf_conntrack_standalone.c | 10 ++ net/sysctl_net.c