net: make net namespace sysctls belong to container's owner

Browse source

If net namespace is attached to a user namespace let's make container's
root owner of sysctls affecting said network namespace instead of global
root.

This also allows us to clean up net_ctl_permissions() because we do not
need to fudge permissions anymore for the container's owner since it now
owns the objects in question.

Acked-by: "Eric W. Biederman" <ebiederm@xmission.com>
Signed-off-by: Dmitry Torokhov <dmitry.torokhov@gmail.com>
Signed-off-by: David S. Miller <davem@davemloft.net>

...

This commit is contained in:

Dmitry Torokhov 2016-08-10 14:36:02 -07:00 • committed by David S. Miller

parent c110486f6c

commit e79c6a4fc9

3 changed files with 29 additions and 9 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download patch file Download diff file Expand all files Collapse all files

5

fs/proc/proc_sysctl.c

View file

4

include/linux/sysctl.h

View file

29

net/sysctl_net.c

View file