]> err.no Git - linux-2.6/commit
[NET]: Modify all rtnetlink methods to only work in the initial namespace (v2)
authorDenis V. Lunev <den@openvz.org>
Fri, 30 Nov 2007 13:21:31 +0000 (00:21 +1100)
committerDavid S. Miller <davem@davemloft.net>
Mon, 28 Jan 2008 22:54:24 +0000 (14:54 -0800)
commitb854272b3c732316676e9128f7b9e6f1e1ff88b0
treec90c74b9ec068453881f1173da4c57d6bb00a7d9
parentad5d20a63940fcfb40af76ba06148f36d5d0b433
[NET]: Modify all rtnetlink methods to only work in the initial namespace (v2)

Before I can enable rtnetlink to work in all network namespaces I need
to be certain that something won't break.  So this patch deliberately
disables all of the rtnletlink methods in everything except the
initial network namespace.  After the methods have been audited this
extra check can be disabled.

Changes from v1:
- added IPv6 addrlabel protection

Signed-off-by: Denis V. Lunev <den@openvz.org>
Signed-off-by: Eric W. Biederman <ebiederm@xmission.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
18 files changed:
net/bridge/br_netlink.c
net/core/fib_rules.c
net/core/neighbour.c
net/core/rtnetlink.c
net/decnet/dn_dev.c
net/decnet/dn_fib.c
net/decnet/dn_route.c
net/decnet/dn_table.c
net/ipv4/devinet.c
net/ipv4/fib_frontend.c
net/ipv4/route.c
net/ipv6/addrconf.c
net/ipv6/addrlabel.c
net/ipv6/ip6_fib.c
net/ipv6/route.c
net/sched/act_api.c
net/sched/cls_api.c
net/sched/sch_api.c