[PATCH nf-next v2] netfilter: allow logging from non-init namespaces

2017-01-31 Thread Michal Kubecek
a nonzero value. This sysctl is only accessible from init_net so that one cannot switch the behaviour from inside a container. Signed-off-by: Michal Kubecek --- v2: fix leak on net/netfilter/nf_log registration failure --- Documentation/networking/netfilter-sysctl.txt | 10 ++ include/net

Re: [PATCH nf-next] netfilter: allow logging from non-init namespaces

2016-08-16 Thread Michal Kubecek
On Mon, May 16, 2016 at 08:43:16AM +0200, Michal Kubecek wrote: > On Thu, May 12, 2016 at 11:57:26AM +0200, Pablo Neira Ayuso wrote: > > On Wed, Apr 27, 2016 at 02:48:02PM +0200, Michal Kubecek wrote: > > > Commit 69b34fb996b2 ("netfilter: xt_LOG: add net namespace s

Re: [PATCH nf-next] netfilter: allow logging from non-init namespaces

2016-05-15 Thread Michal Kubecek
On Thu, May 12, 2016 at 11:57:26AM +0200, Pablo Neira Ayuso wrote: > Hi Michal, > > On Wed, Apr 27, 2016 at 02:48:02PM +0200, Michal Kubecek wrote: > > Commit 69b34fb996b2 ("netfilter: xt_LOG: add net namespace support for > > xt_LOG") disabled logging packets usi

[PATCH nf-next] netfilter: allow logging from non-init namespaces

2016-04-28 Thread Michal Kubecek
a nonzero value. This sysctl is only accessible from init_net so that one cannot switch the behaviour from inside a container. Signed-off-by: Michal Kubecek --- Documentation/networking/netfilter-sysctl.txt | 10 ++ include/net/netfilter/nf_log.h| 3 +++ net/bridge/netfilter