On Fri, Mar 19, 2004 at 04:19:03PM +0100, Ivo De Decker wrote: > Hello, > > The current vserver patch (1.26) doesn't limit the use of ipv6 addresses in > vservers. The attached patch should disable ipv6 inside vservers, making it > possible to enable ipv6 on the main server, without problems caused by users > inside vservers. > > Comments? Ideas?
might work, any tests done with that? TIA, Herbert > Greetings, > > Ivo De Decker > --- linux-2.4.25.orig/net/socket.c 2004-02-18 14:36:32.000000000 +0100 > +++ linux-2.4.25/net/socket.c 2004-03-19 16:07:26.000000000 +0100 > @@ -833,6 +833,10 @@ > return -EAFNOSUPPORT; > if (type < 0 || type >= SOCK_MAX) > return -EINVAL; > + > + // vservers not allowed to use ipv6 > + if (family == PF_INET6 && !vx_check(0, VX_ADMIN)) > + return -EAFNOSUPPORT; > > /* Compatibility. > _______________________________________________ Vserver mailing list [EMAIL PROTECTED] http://list.linux-vserver.org/mailman/listinfo/vserver
