diff options
| author | Daniel Lezcano <dlezcano@fr.ibm.com> | 2008-03-05 19:46:31 +0100 |
|---|---|---|
| committer | David S. Miller <davem@davemloft.net> | 2008-03-05 19:46:31 +0100 |
| commit | 300bf591deca8d108799e70e9300dc31765643e3 (patch) | |
| tree | 24f0399015f1b42e967e1bdc9eaacddc8622d35b /net/ipv6 | |
| parent | [NETNS][IPV6] af_inet6 - allow socket creation per namespace (diff) | |
| download | linux-300bf591deca8d108799e70e9300dc31765643e3.tar.xz linux-300bf591deca8d108799e70e9300dc31765643e3.zip | |
[NETNS][IPV6] proc - protect snmp6 from non-init_net calls
This patchset avoids creation of the /proc entry for snmp6 when
the call is made from a network namespace different from the init_net.
Signed-off-by: Daniel Lezcano <dlezcano@fr.ibm.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Diffstat (limited to 'net/ipv6')
| -rw-r--r-- | net/ipv6/proc.c | 3 |
1 files changed, 3 insertions, 0 deletions
diff --git a/net/ipv6/proc.c b/net/ipv6/proc.c index 5ba7ae849d04..2453f2229ef7 100644 --- a/net/ipv6/proc.c +++ b/net/ipv6/proc.c @@ -220,6 +220,9 @@ int snmp6_register_dev(struct inet6_dev *idev) if (!idev || !idev->dev) return -EINVAL; + if (idev->dev->nd_net != &init_net) + return 0; + if (!proc_net_devsnmp6) return -ENOENT; |