diff options
| author | Jakub Kicinski <kuba@kernel.org> | 2026-02-13 12:28:40 -0800 |
|---|---|---|
| committer | Jakub Kicinski <kuba@kernel.org> | 2026-02-13 12:28:40 -0800 |
| commit | 36e838630c111a510f47e49d559bd26aba7d9a1b (patch) | |
| tree | 6a32a60dd65bd2bda4e58c905049b6f3f88dfc2b /include/linux/i2c/git@git.tavy.me:linux.git | |
| parent | a49d2a2c37a6252c41cbdd505f9d1c58d5a3817a (diff) | |
| parent | 6a997f38bdf822d4c5cc10b445ff1cb26872580a (diff) | |
Merge branch 'vsock-fix-child-netns-mode-initialization-and-restriction'
Stefano Garzarella says:
====================
vsock: fix child netns mode initialization and restriction
This series fixes two issues in the vsock network namespace support
recently introduced by commit eafb64f40ca4 ("vsock: add netns to vsock
core").
Patch 1 fixes `child_ns_mode` being always hardcoded to "global" for new
namespaces, breaking propagation of the "local" mode through nested
namespaces.
Patch 2 prevents a "local" namespace from switching `child_ns_mode` to
"global", which would allow nested namespaces to escape vsock isolation
and access global CIDs.
====================
Link: https://patch.msgid.link/20260212205916.97533-1-sgarzare@redhat.com
Signed-off-by: Jakub Kicinski <kuba@kernel.org>
Diffstat (limited to 'include/linux/i2c/git@git.tavy.me:linux.git')
0 files changed, 0 insertions, 0 deletions