netdev - Re: [RFD] L2 Network namespace infrastructure

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date:	24 Jun 2007 12:25:50 +0200
From:	Benny Amorsen <benny+usenet@...rsen.dk>
To:	netdev@...r.kernel.org
Subject:  Re: [RFD] L2 Network namespace infrastructure

>>>>> "DM" == David Miller <davem@...emloft.net> writes:

DM> Containers are I believe a step backwards, and we're better than
DM> that.

Are there any alternative proposals?

I guess it would be a start if you could run processes with a
different policy table as default. Ideally traffic from those
processes would automatically enter a particular policy table without
having to manually set up "ip rule" to catch their traffic. ip route
would by default show that policy table; quagga would by default
manage that table.

I think that would provide me with the functionality I need, and it
would not pretend to provide isolation.

/Benny

-
To unsubscribe from this list: send the line "unsubscribe netdev" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html