projects / GitHub / moto-9609 / android_kernel_motorola_exynos9610.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: a1560dd) | patch
netfilter: conntrack: do not dump other netns's conntrack entries via proc
authorLiping Zhang <liping.zhang@spreadtrum.com>
Mon, 15 Aug 2016 13:50:35 +0000 (21:50 +0800)
committerPablo Neira Ayuso <pablo@netfilter.org>
Wed, 17 Aug 2016 15:41:58 +0000 (17:41 +0200)
commite77e6ff502ea3d193872b5b9033bfd9717b36447
treede6d9d933936650e25f957ba5084a582fd709c05tree | snapshot (tar.gz zip)
parenta1560dd7a47f983419760aa7f6a481e3b910b54bcommit | diff
netfilter: conntrack: do not dump other netns's conntrack entries via proc

We should skip the conntracks that belong to a different namespace,
otherwise other unrelated netns's conntrack entries will be dumped via
/proc/net/nf_conntrack.

Fixes: 56d52d4892d0 ("netfilter: conntrack: use a single hashtable for all namespaces")
Signed-off-by: Liping Zhang <liping.zhang@spreadtrum.com>
Reviewed-by: Florian Westphal <fw@strlen.de>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
net/netfilter/nf_conntrack_standalone.c diff | blob | blame | history