OpenVZ Forum: Devel » [PATCH 00/16] core network namespace support

Home » Mailing lists » Devel » [PATCH 00/16] core network namespace support

Show: Today's Messages :: Show Polls :: Message Navigator
E-mail to friend

Re: [PATCH 17/16] net: Disable netfilter sockopts when not in the initial network namespace [message #19994 is a reply to message #19983]

Mon, 10 September 2007 15:27

ebiederm
Messages: 1354
Registered: February 2006

Senior Member

Pavel Emelyanov <xemul@openvz.org> writes:

> Eric W. Biederman wrote:
>> Until we support multiple network namespaces with netfilter only allow
>> netfilter configuration in the initial network namespace.
>
> PATCH 17/16? :)

Exactly!

If my target was the core of the networking stack I figured I better
include the change that keeps netfilter commands isolated to the
initial network namespace, and in my review of completeness I had
missed that in my first pass through my patches.

Eric

_______________________________________________
Containers mailing list
Containers@lists.linux-foundation.org
https://lists.linux-foundation.org/mailman/listinfo/containers

Report message to a moderator

[Message index]

		[PATCH 00/16] core network namespace support By: ebiederm on Sat, 08 September 2007 21:07
		[PATCH 01/16] appletalk: In notifier handlers convert the void pointer to a netdevice By: ebiederm on Sat, 08 September 2007 21:09
		[PATCH 02/16] net: Don't implement dev_ifname32 inline By: ebiederm on Sat, 08 September 2007 21:13
		[PATCH 03/16] net: Basic network namespace infrastructure. By: ebiederm on Sat, 08 September 2007 21:15
		[PATCH 04/16] net: Add a network namespace parameter to tasks By: ebiederm on Sat, 08 September 2007 21:17
		[PATCH 05/16] net: Add a network namespace tag to struct net_device By: ebiederm on Sat, 08 September 2007 21:18
		[PATCH 07/16] net: Make /proc/net per network namespace By: ebiederm on Sat, 08 September 2007 21:20
		[PATCH 08/16] net: Make socket creation namespace safe. By: ebiederm on Sat, 08 September 2007 21:23
		[PATCH 09/16] net: Initialize the network namespace of network devices. By: ebiederm on Sat, 08 September 2007 21:24
		[PATCH 10/16] net: Make packet reception network namespace safe By: ebiederm on Sat, 08 September 2007 21:25
		[PATCH 11/16] net: Make device event notification network namespace safe By: ebiederm on Sat, 08 September 2007 21:27
		[PATCH 12/16] net: Support multiple network namespaces with netlink By: ebiederm on Sat, 08 September 2007 21:28
		[PATCH 13/16] net: Make the device list and device lookups per namespace. By: ebiederm on Sat, 08 September 2007 21:35
		[PATCH 14/16] net: Factor out __dev_alloc_name from dev_alloc_name By: ebiederm on Sat, 08 September 2007 21:36
		[PATCH 15/16] net: Implement network device movement between namespaces By: ebiederm on Sat, 08 September 2007 21:38
		[PATCH 16/16] net: netlink support for moving devices between network namespaces. By: ebiederm on Sat, 08 September 2007 21:43
		[PATCH 17/16] net: Disable netfilter sockopts when not in the initial network namespace By: ebiederm on Sat, 08 September 2007 21:47
		Re: [PATCH 17/16] net: Disable netfilter sockopts when not in the initial network namespace By: ebiederm on Mon, 10 September 2007 15:27
		Re: [PATCH 17/16] net: Disable netfilter sockopts when not in the initial network namespace By: Pavel Emelianov on Mon, 10 September 2007 13:50
		Re: [PATCH 17/16] net: Disable netfilter sockopts when not in the initial network namespace By: davem on Wed, 12 September 2007 11:59
		Re: [PATCH 17/16] net: Disable netfilter sockopts when not in the initial network namespace By: davem on Wed, 12 September 2007 12:03
		Re: [PATCH 17/16] net: Disable netfilter sockopts when not in the initial network namespace By: ebiederm on Wed, 12 September 2007 12:16
		Re: [PATCH 16/16] net: netlink support for moving devices between network namespaces. By: ebiederm on Mon, 10 September 2007 19:30
		Re: [PATCH 16/16] net: netlink support for moving devices between network namespaces. By: serue on Tue, 11 September 2007 00:54
		Re: [PATCH 16/16] net: netlink support for moving devices between network namespaces. By: serue on Mon, 10 September 2007 19:07
		Re: [PATCH 16/16] net: netlink support for moving devices between network namespaces. By: davem on Wed, 12 September 2007 11:57
		Re: [PATCH 15/16] net: Implement network device movement between namespaces By: davem on Wed, 12 September 2007 11:54
		Re: [PATCH 14/16] net: Factor out __dev_alloc_name from dev_alloc_name By: davem on Wed, 12 September 2007 11:49
		Re: [PATCH 13/16] net: Make the device list and device lookups per namespace. By: davem on Wed, 12 September 2007 11:39
		Re: [PATCH 12/16] net: Support multiple network namespaces with netlink By: ebiederm on Mon, 10 September 2007 15:24
		Re: [PATCH 12/16] net: Support multiple network namespaces with netlink By: Pavel Emelianov on Mon, 10 September 2007 13:46
		Re: [PATCH 12/16] net: Support multiple network namespaces with netlink By: davem on Wed, 12 September 2007 11:06
		Re: [PATCH 11/16] net: Make device event notification network namespace safe By: davem on Wed, 12 September 2007 11:02
		Re: [PATCH 10/16] net: Make packet reception network namespace safe By: davem on Wed, 12 September 2007 11:00
		Re: [PATCH 09/16] net: Initialize the network namespace of network devices. By: davem on Wed, 12 September 2007 10:58
		Re: [PATCH 08/16] net: Make socket creation namespace safe. By: davem on Wed, 12 September 2007 10:04
		Re: [PATCH 07/16] net: Make /proc/net per network namespace By: davem on Wed, 12 September 2007 10:02
		Re: [PATCH 07/16] net: Make /proc/net per network namespace By: Daniel Lezcano on Wed, 12 September 2007 12:12
		Re: [PATCH 07/16] net: Make /proc/net per network namespace By: davem on Wed, 12 September 2007 12:19
		[PATCH 06/16] net: Add a network namespace parameter to struct sock By: ebiederm on Sat, 08 September 2007 21:21
		Re: [PATCH 06/16] net: Add a network namespace parameter to struct sock By: davem on Wed, 12 September 2007 09:58
		Re: [PATCH 06/16] net: Add a network namespace parameter to struct sock By: den on Thu, 20 September 2007 12:55
		Re: [PATCH 06/16] net: Add a network namespace parameter to struct sock By: Daniel Lezcano on Thu, 20 September 2007 13:20
		Re: [PATCH 06/16] net: Add a network namespace parameter to struct sock By: den on Fri, 21 September 2007 05:04
		Re: [PATCH 06/16] net: Add a network namespace parameter to struct sock By: ebiederm on Fri, 21 September 2007 05:58
		Re: [PATCH 06/16] net: Add a network namespace parameter to struct sock By: Daniel Lezcano on Fri, 21 September 2007 07:30
		Re: [PATCH 05/16] net: Add a network namespace tag to struct net_device By: davem on Wed, 12 September 2007 09:57
		Re: [PATCH 04/16] net: Add a network namespace parameter to tasks By: davem on Wed, 12 September 2007 09:55
		Re: [PATCH 03/16] net: Basic network namespace infrastructure. By: paulmck on Sun, 09 September 2007 00:33
		Re: [PATCH 03/16] net: Basic network namespace infrastructure. By: ebiederm on Sun, 09 September 2007 10:04
		Re: [PATCH 03/16] net: Basic network namespace infrastructure. By: paulmck on Sun, 09 September 2007 16:45
		Re: [PATCH 03/16] net: Basic network namespace infrastructure. By: ebiederm on Mon, 10 September 2007 06:32
		Re: [PATCH 03/16] net: Basic network namespace infrastructure. By: ebiederm on Sun, 09 September 2007 10:18
		Re: [PATCH 03/16] net: Basic network namespace infrastructure. By: Eric Dumazet on Sun, 09 September 2007 08:44
		Re: [PATCH 03/16] net: Basic network namespace infrastructure. By: ebiederm on Mon, 10 September 2007 06:40
		Re: [PATCH 03/16] net: Basic network namespace infrastructure. By: ebiederm on Mon, 10 September 2007 15:53
		Re: [PATCH 03/16] net: Basic network namespace infrastructure. By: Krishna Kumar2 on Mon, 10 September 2007 05:46
		Re: [PATCH 03/16] net: Basic network namespace infrastructure. By: Pavel Emelianov on Mon, 10 September 2007 13:16
		Re: [PATCH 03/16] net: Basic network namespace infrastructure. By: davem on Wed, 12 September 2007 09:52
		Re: [PATCH 02/16] net: Don't implement dev_ifname32 inline By: davem on Wed, 12 September 2007 09:39
		Re: [PATCH 01/16] appletalk: In notifier handlers convert the void pointer to a netdevice By: davem on Wed, 12 September 2007 09:27

Previous Topic:	[PATCH] Consolidate sleeping routines in file locking code
Next Topic:	NET namespace locking seems broken to me

Goto Forum:

-=] Back to Top [=-

[ Syndicate this forum (XML) ] [

] [

]

Current Time: Thu Sep 12 12:28:58 GMT 2024

Total time taken to generate the page: 0.05315 seconds