| lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
|
Open Source and information security mailing list archives
| ||
|
Message-ID: <54AD8BC3.2070609@hp.com> Date: Wed, 07 Jan 2015 14:40:51 -0500 From: Brian Haley <brian.haley@...com> To: Vadim Kochan <vadim4j@...il.com> CC: netdev@...r.kernel.org Subject: Re: [PATCH iproute2 3/3] ip netns: Delete all netns On 01/07/2015 01:11 PM, Vadim Kochan wrote: > On Wed, Jan 07, 2015 at 07:36:40PM +0200, Vadim Kochan wrote: >> On Wed, Jan 07, 2015 at 10:44:24AM -0500, Brian Haley wrote: >>> On 01/07/2015 06:04 AM, Vadim Kochan wrote: >>>> From: Vadim Kochan <vadim4j@...il.com> >>>> >>>> Allow delete all namespace names by: >>>> >>>> $ ip netns del all >>> >>> So I can still create a namespace called 'all', but can't exec in it or delete >>> it independently with this change. Perhaps you need to block that as well? >>> Unless there's some other patch I'm missing? >>> >>> -Brian >> Hm, I did not take it into account ... >> I will look if I can find another way ... >> >> Thanks, > > what about this ? > > $ ip netns exec / ip link > $ ip netns del / > > so it make a sense to be as root directory of bound ns names in /var/run/netns/ ? > what do you think ? I think using / is confusing. And something like -a[ll] as an option doesn't seem right either. Or you just trap the name "all" in the add case and don't allow it. Just my opinion. -Brian -- To unsubscribe from this list: send the line "unsubscribe netdev" in the body of a message to majordomo@...r.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html
Powered by blists - more mailing lists