Re: [PATCH net-next 0/2] Ensuring net sysctl isolation

2021-04-12 Thread patchwork-bot+netdevbpf
Hello: This series was applied to netdev/net-next.git (refs/heads/master): On Mon, 12 Apr 2021 00:24:51 -0400 you wrote: > This patchset is the result of an audit of /proc/sys/net to prove that > it is safe to be mouted read-write in a container when a net namespace > is in use. See [1]. > > The

[PATCH net-next 0/2] Ensuring net sysctl isolation

2021-04-11 Thread Jonathon Reinhart
This patchset is the result of an audit of /proc/sys/net to prove that it is safe to be mouted read-write in a container when a net namespace is in use. See [1]. The first commit adds code to detect sysctls which are not netns-safe, and can "leak" changes to other net namespaces. My manual audit