On Fri, Sep 30, 2016 at 01:21:27AM -0400, David Miller wrote:
> From: Dmitry Torokhov
> Date: Thu, 29 Sep 2016 08:46:05 -0700
>
> > Hi David,
> >
> > On Wed, Aug 10, 2016 at 2:36 PM, Dmitry Torokhov
> > wrote:
> >> If net namespace is attached to a user namespace let's make container's
> >> roo
From: Dmitry Torokhov
Date: Thu, 29 Sep 2016 08:46:05 -0700
> Hi David,
>
> On Wed, Aug 10, 2016 at 2:36 PM, Dmitry Torokhov
> wrote:
>> If net namespace is attached to a user namespace let's make container's
>> root owner of sysctls affecting said network namespace instead of global
>> root.
>
Hi David,
On Wed, Aug 10, 2016 at 2:36 PM, Dmitry Torokhov
wrote:
> If net namespace is attached to a user namespace let's make container's
> root owner of sysctls affecting said network namespace instead of global
> root.
>
> This also allows us to clean up net_ctl_permissions() because we do no
If net namespace is attached to a user namespace let's make container's
root owner of sysctls affecting said network namespace instead of global
root.
This also allows us to clean up net_ctl_permissions() because we do not
need to fudge permissions anymore for the container's owner since it now
ow