* nfacct is not namespace aware
@ 2015-08-04 15:56 Andreas Schultz
2015-08-04 17:17 ` Pablo Neira Ayuso
0 siblings, 1 reply; 2+ messages in thread
From: Andreas Schultz @ 2015-08-04 15:56 UTC (permalink / raw)
To: netfilter-devel
Hi,
Can someone confirm that the nfacct subsystem is not network namespace
aware/safe?
>From checking the code, it would appear that all nfacct targets are kept
in a global list. This would mean that unrelated namespaces can interfere
with each other.
Andreas
^ permalink raw reply [flat|nested] 2+ messages in thread
* Re: nfacct is not namespace aware
2015-08-04 15:56 nfacct is not namespace aware Andreas Schultz
@ 2015-08-04 17:17 ` Pablo Neira Ayuso
0 siblings, 0 replies; 2+ messages in thread
From: Pablo Neira Ayuso @ 2015-08-04 17:17 UTC (permalink / raw)
To: Andreas Schultz; +Cc: netfilter-devel
On Tue, Aug 04, 2015 at 05:56:32PM +0200, Andreas Schultz wrote:
> Hi,
>
> Can someone confirm that the nfacct subsystem is not network namespace
> aware/safe?
>
> From checking the code, it would appear that all nfacct targets are kept
> in a global list. This would mean that unrelated namespaces can interfere
> with each other.
There is no netns support for nfacct yet, but it should be easy to
add.
Patches are welcome :)
^ permalink raw reply [flat|nested] 2+ messages in thread
end of thread, other threads:[~2015-08-04 17:11 UTC | newest]
Thread overview: 2+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2015-08-04 15:56 nfacct is not namespace aware Andreas Schultz
2015-08-04 17:17 ` Pablo Neira Ayuso
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).