search for: init_user_ns

...l.ip6_rt_min_advmss; > > table[9].data = &net->ipv6.sysctl.ip6_rt_gc_min_interval; > > table[10].data = &net->ipv6.sysctl.skip_notify_on_dev_down; > > - > > - /* Don't export sysctls to unprivileged users */ > > - if (net->user_ns != &init_user_ns) > > - table[1].procname = NULL; Here I remove the setting of the procname to NULL for ipv6 sysctl registers in route.c and I do not replace that assignment anywhere. This means that we will export sysctls to unprivilged users for ipv6. I'll correct this in V3. > > } > >...

...m_table); > > __xfrm_sysctl_init(net); > > @@ -56,10 +57,13 @@ int __net_init xfrm_sysctl_init(struct net *net) > > table[3].data = &net->xfrm.sysctl_acq_expires; > > /* Don't export sysctls to unprivileged users */ > > - if (net->user_ns != &init_user_ns) > > + if (net->user_ns != &init_user_ns) { > > table[0].procname = NULL; > > do we still have to set procname to NULL, even if passed size is 0? > (same thing for all earlier occurences) Yes, we still need to set the procname to NULL in this patchest!. We are intro...