Re: [PATCH v5 00/13] exit_net checks for objects initialized in net_init hook

2017-11-14 Thread Vasily Averin
On 2017-11-14 09:47, David Miller wrote: > From: Vasily Averin > Date: Sun, 12 Nov 2017 22:26:44 +0300 > >> OpenVz kernel team have a long history of fighting against namespace-related >> bugs, >> some of them could be prevented by using simple checks described below. >> >> One of typical errors

Re: [PATCH v5 00/13] exit_net checks for objects initialized in net_init hook

2017-11-13 Thread David Miller
From: Vasily Averin Date: Sun, 12 Nov 2017 22:26:44 +0300 > OpenVz kernel team have a long history of fighting against namespace-related > bugs, > some of them could be prevented by using simple checks described below. > > One of typical errors is related to live cycle of namespaces: > usually

[PATCH v5 00/13] exit_net checks for objects initialized in net_init hook

2017-11-12 Thread Vasily Averin
OpenVz kernel team have a long history of fighting against namespace-related bugs, some of them could be prevented by using simple checks described below. One of typical errors is related to live cycle of namespaces: usually objects created for some namespace should not live longer than namespac