diff options
| author | Daniel Lezcano <dlezcano@fr.ibm.com> | 2008-03-05 10:46:31 -0800 |
|---|---|---|
| committer | David S. Miller <davem@davemloft.net> | 2008-03-05 10:46:31 -0800 |
| commit | 300bf591deca8d108799e70e9300dc31765643e3 (patch) | |
| tree | 24f0399015f1b42e967e1bdc9eaacddc8622d35b /net/ipv6/proc.c | |
| parent | 075de9395760d6d181078f863e676e81c06e1af2 (diff) | |
| download | linux-300bf591deca8d108799e70e9300dc31765643e3.tar.gz linux-300bf591deca8d108799e70e9300dc31765643e3.tar.bz2 linux-300bf591deca8d108799e70e9300dc31765643e3.zip | |
[NETNS][IPV6] proc - protect snmp6 from non-init_net calls
This patchset avoids creation of the /proc entry for snmp6 when
the call is made from a network namespace different from the init_net.
Signed-off-by: Daniel Lezcano <dlezcano@fr.ibm.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Diffstat (limited to 'net/ipv6/proc.c')
| -rw-r--r-- | net/ipv6/proc.c | 3 |
1 files changed, 3 insertions, 0 deletions
diff --git a/net/ipv6/proc.c b/net/ipv6/proc.c index 5ba7ae849d04..2453f2229ef7 100644 --- a/net/ipv6/proc.c +++ b/net/ipv6/proc.c @@ -220,6 +220,9 @@ int snmp6_register_dev(struct inet6_dev *idev) if (!idev || !idev->dev) return -EINVAL; + if (idev->dev->nd_net != &init_net) + return 0; + if (!proc_net_devsnmp6) return -ENOENT; |