| commit | 174c376278949c44aad89c514a6b5db6cee8db59 | [log] [tgz] |
|---|---|---|
| author | Antoine Tenart <atenart@kernel.org> | Tue Oct 12 16:54:37 2021 +0200 |
| committer | Pablo Neira Ayuso <pablo@netfilter.org> | Thu Oct 14 23:08:35 2021 +0200 |
| tree | be6c0a505440acf0c3004538f3c972a3f82ef272 | |
| parent | a482c5e00a9b5a194085bcd372ac36141028becb [diff] |
netfilter: ipvs: make global sysctl readonly in non-init netns
Because the data pointer of net/ipv4/vs/debug_level is not updated per
netns, it must be marked as read-only in non-init netns.
Fixes: c6d2d445d8de ("IPVS: netns, final patch enabling network name space.")
Signed-off-by: Antoine Tenart <atenart@kernel.org>
Acked-by: Julian Anastasov <ja@ssi.bg>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>