Re: [PATCH v3 net-next] Introduce a sysctl that modifies the value of PROT_SOCK.

2017-01-24 Thread David Miller
From: Krister Johansen Date: Fri, 20 Jan 2017 17:49:11 -0800 > Add net.ipv4.ip_unprivileged_port_start, which is a per namespace sysctl > that denotes the first unprivileged inet port in the namespace. To > disable all privileged ports set this to zero. It also checks for > overlap with the loc

Re: [PATCH v3 net-next] Introduce a sysctl that modifies the value of PROT_SOCK.

2017-01-23 Thread David Miller
From: Krister Johansen Date: Fri, 20 Jan 2017 17:49:11 -0800 > Add net.ipv4.ip_unprivileged_port_start, which is a per namespace sysctl > that denotes the first unprivileged inet port in the namespace. To > disable all privileged ports set this to zero. It also checks for > overlap with the loc

[PATCH v3 net-next] Introduce a sysctl that modifies the value of PROT_SOCK.

2017-01-20 Thread Krister Johansen
Add net.ipv4.ip_unprivileged_port_start, which is a per namespace sysctl that denotes the first unprivileged inet port in the namespace. To disable all privileged ports set this to zero. It also checks for overlap with the local port range. The privileged and local range may not overlap. The us