Re: [PATCH] ipvs: allow netlink configuration from non-initial user namespace

2024-03-08 Thread Michael Weiß
On 3/8/24 08:55, Julian Anastasov wrote: > > Hello, > > On Thu, 7 Mar 2024, Michael Weiß wrote: > >> Configuring ipvs in a non-initial user namespace using the genl >> netlink interface, e.g., by 'ipvsadm' is currently resulting in an >> '-EPERM'. This is due to the use of GENL_ADMIN_PERM

Re: [PATCH] ipvs: allow netlink configuration from non-initial user namespace

2024-03-08 Thread Julian Anastasov
Hello, On Thu, 7 Mar 2024, Michael Weiß wrote: > Configuring ipvs in a non-initial user namespace using the genl > netlink interface, e.g., by 'ipvsadm' is currently resulting in an > '-EPERM'. This is due to the use of GENL_ADMIN_PERM flag in > 'ip_vs_ctl.c'. > > Similarly to other

[PATCH] ipvs: allow netlink configuration from non-initial user namespace

2024-03-07 Thread Michael Weiß
Configuring ipvs in a non-initial user namespace using the genl netlink interface, e.g., by 'ipvsadm' is currently resulting in an '-EPERM'. This is due to the use of GENL_ADMIN_PERM flag in 'ip_vs_ctl.c'. Similarly to other genl interfaces, we switch to the use of GENL_UNS_ADMIN_PERM flag which