| lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
|
Open Source and information security mailing list archives
| ||
|
Date: Tue, 18 Dec 2012 11:22:59 -0600 From: Dan Williams <dcbw@...hat.com> To: Ravi Aysola <ravi.mlists@...il.com> Cc: netdev@...r.kernel.org Subject: Re: network namespace and DNS lookups On Tue, 2012-12-18 at 10:49 -0500, Ravi Aysola wrote: > I think I sent my earlier email a bit prematurely. I do have > /etc/netns/<namespace-name>/resolv.conf > files under each of my namespaces. Now the question is, how does a > user space process > (say bind) look at a namespace specific resolv.conf instead of > default one? Have any of > these standard applications been modified to work with namespace > specific config files? Wouldn't that be the glibc resolver's domain? DNS lookups aren't done by the kernel, but by glibc in userspace. And glibc is also what reads resolv.conf, so most things DNS-namespace related would need to happen there. Dan > thanks again > ravi/ > > On Tue, Dec 18, 2012 at 10:09 AM, Ravi Aysola <ravi.mlists@...il.com> wrote: > > Has there been any work in any of the recent kernels to limit the DNS lookup > > to a particular network namespace? Do we have any facility to specify the > > DNS resolvers on network namespace basis (such as /etc/ns/resolv.conf)? > > > > thank you > > ravi/ > -- > To unsubscribe from this list: send the line "unsubscribe netdev" in > the body of a message to majordomo@...r.kernel.org > More majordomo info at http://vger.kernel.org/majordomo-info.html -- To unsubscribe from this list: send the line "unsubscribe netdev" in the body of a message to majordomo@...r.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html
Powered by blists - more mailing lists