Re: [PATCH] ipv4: in new netns initialize sysctls in net.ipv4.conf.* with defaults

From	David Miller <davem@davemloft.net>
Newsgroups	linux.kernel
Subject	Re: [PATCH] ipv4: in new netns initialize sysctls in net.ipv4.conf.* with defaults
Date	2016-02-25 17:50 +0100
Message-ID	<r67gZ-6Ay-1@gated-at.bofh.it> (permalink)
References	<r5uz0-4cb-35@gated-at.bofh.it> <r5PWO-2Ff-27@gated-at.bofh.it> <r655w-54N-19@gated-at.bofh.it>
Organization	linux.* mail to news gateway

Show all headers | View raw

From: Nicolas Dichtel <nicolas.dichtel@6wind.com>
Date: Thu, 25 Feb 2016 15:20:48 +0100

> Le 24/02/2016 23:05, Eric W. Biederman a écrit :
> [snip]
>> In the general case the current behavior is random and not something
>> applications can count on, and we would do well to fix it so it is
>> less
>> random.  In particular consider the case of an application in a
>> non-initial network namespace creating a new network namespace.  It is
>> not even possible to predict what values they will get for sysctls
>> today.
> +1

But there is a counter argument to this.

The admin set up the initial namespace so that any namespace
instantiated by a user (even non-initial namespaces) starts with a
specific set of sysctl values.  So the admin "knows", he set it up
intentionally this way, and it's a valid model.

This behavior is anything but random.  Rather, it is very predictable
and controllable.

Do you really want to find out who you're going to break out there with
so many installations in the world right now?

I do not.

Back to linux.kernel | Previous | Next — Previous in thread | Find similar | Unroll thread

Thread

Re: [PATCH] ipv4: in new netns initialize sysctls in  net.ipv4.conf.* with defaults David Miller <davem@davemloft.net> - 2016-02-24 00:30 +0100
  Re: [PATCH] ipv4: in new netns initialize sysctls in net.ipv4.conf.*  with defaults Konstantin Khlebnikov <koct9i@gmail.com> - 2016-02-24 06:20 +0100
    Re: [PATCH] ipv4: in new netns initialize sysctls in  net.ipv4.conf.* with defaults David Miller <davem@davemloft.net> - 2016-02-24 16:30 +0100
  Re: [PATCH] ipv4: in new netns initialize sysctls in net.ipv4.conf.* with defaults ebiederm@xmission.com (Eric W. Biederman) - 2016-02-24 23:20 +0100
    Re: [PATCH] ipv4: in new netns initialize sysctls in net.ipv4.conf.*  with defaults Nicolas Dichtel <nicolas.dichtel@6wind.com> - 2016-02-25 15:30 +0100
      Re: [PATCH] ipv4: in new netns initialize sysctls in  net.ipv4.conf.* with defaults David Miller <davem@davemloft.net> - 2016-02-25 17:50 +0100

csiph-web