From mboxrd@z Thu Jan 1 00:00:00 1970 From: Grzegorz Nosek Subject: Re: [Devel] [RFC][PATCH] IP address restricting cgroup subsystem Date: Sat, 10 Jan 2009 12:20:09 +0100 Message-ID: <20090110112009.GA12336@megiteam.pl> References: <20090106230554.GB25228@eskarina.localdomain.pl> <6599ad830901091358m11effdbegeff6cbb7ee28e262@mail.gmail.com> Mime-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 Return-path: Content-Disposition: inline In-Reply-To: <6599ad830901091358m11effdbegeff6cbb7ee28e262-JsoAwUIsXosN+BqQ9rBEUg@public.gmane.org> List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: containers-bounces-cunTk1MwBs9QetFLy7KEm3xJsTq8ys+cHZ5vskTnxNA@public.gmane.org Errors-To: containers-bounces-cunTk1MwBs9QetFLy7KEm3xJsTq8ys+cHZ5vskTnxNA@public.gmane.org To: Paul Menage Cc: containers-qjLDD68F18O7TbgM5vRIOg@public.gmane.org List-Id: containers.vger.kernel.org T24gcGnEhSwgc3R5IDA5LCAyMDA5IGF0IDAxOjU4OjQyIC0wODAwLCBQYXVsIE1lbmFnZSB3cm90 ZToKPiBXaGlsZSBzb21ldGhpbmcgdG8gYWxsb3cgcmVzdHJpY3RpbmcgbmV0d29yayBhY2Nlc3Mg ZnJvbSB0YXNrcyBpbiBhCj4gY2dyb3VwIGlzIHVzZWZ1bCwgdGhlIGJhc2ljIHByb2JsZW0gd2l0 aCB0aGUgcGF0Y2hlcyB0aGF0IGhhdmUgYmVlbgo+IHByb3Bvc2VkIGlzIHRoZSB1c2Vyc3BhY2Ug QVBJLgo+IAo+IE9uY2UgYW4gQVBJIG1ha2VzIGl0IGludG8gdGhlIGtlcm5lbCwgd2UgaGF2ZSB0 byBzdXBwb3J0IGl0IG1vcmUgb3IKPiBsZXNzIGluZGVmaW5pdGVseS4gU28gdGhhdCBtZWFucyB3 ZSB3YW50IHRvIGNvbWUgdXAgd2l0aCBzb21ldGhpbmcKPiB0aGF0IHdpbGwgc2F0aXNmeSBzYXkg OTUlIG9mIHVzZXJzICpiZWZvcmUqIGl0IGdldHMgYW55d2hlcmUgbmVhcgo+IG1haW5saW5lLgoK Q2VydGFpbmx5LiBUaGUgcGF0Y2ggaXMgUkZDLCBub3QgbWFpbmxpbmUtbWUtbm93LiBXaGlsZSBp dCBzY3JhdGNoZXMgbXkKY3VycmVudCBpdGNoLCBJJ2QgZGVmaW5pdGVseSB3YW50IGl0IHRvIGJl IG1vcmUgdXNlZnVsLiBJIGp1c3Qgd2FudGVkIHRvCnJlY2VpdmUgc29tZSBjb21tZW50cyBvbiB0 aGUgb3ZlcmFsbCBpZGVhIGJlZm9yZSBJIGludmVzdCB3YXkgdG9vIG11Y2gKdGltZSBpbiBpdC4K Cj4gU28gZm9yIGV4YW1wbGUsIHNvbWUgcGVvcGxlIG1pZ2h0IHdhbnQgbXVsdGlwbGUgSVAgYWRk cmVzc2VzOyBvdGhlcnMKPiBtaWdodCB3YW50IHRvIHNwZWNpZnkgYSBzdWJuZXQsIGJ1dCBleGNs dWRlIGNlcnRhaW4gYWRkcmVzc2VzOwo+IGNvbnRyb2xsaW5nIHdoaWNoIHBvcnRzIG9yIHBvcnQt cmFuZ2VzIGNhbiBiZSBib3VuZCB0byBpcyBhbHNvIHVzZWZ1bAo+IChhbmQgaW4gZmFjdCBpcyB3 aGF0IEknZCBiZSBtb3N0IGludGVyZXN0ZWQgaW4pLgoKLi4uYW5kIHNvbWUgcGVvcGxlIG1pZ250 IG5vdCB3YW50IHRoZSBsb29wYmFjayBzcGVjaWFsIGNhc2UuIFNvIHdlJ2QKbmVlZCBhIGJsYWNr LSBhbmQgd2hpdGVsaXN0IG9mOgoKSVAgYWRkcmVzcyBbL25ldG1hc2tdIFtwb3J0IFstIHBvcnRd XQoKcmlnaHQ/IFdvdWxkIHRoYXQgY292ZXIgYSByZWFzb25hYmxlIHNldCBvZiB1c2UgY2FzZXM/ IElmIHRoZXJlIGFyZQpnb2luZyB0byBiZSBtdWx0aXBsZSBhZGRyZXNzZXMsIHdlJ2QgcHJvYmFi bHkgd2FudCBzb21lIG1lY2hhbmlzbSB0bwpkZXRlcm1pbmUgd2hpY2ggb25lIHNob3VsZCBiZSB1 c2VkIGZvciByZW1hcHBpbmcgSU5BRERSX0FOWS4gQlRXLCBkbyB5b3UKd2FudCB0byByZXN0cmlj dCBjb25uZWN0KCkgc291cmNlIHBvcnRzIHRvbz8KCj4gSWRlYWxseSB3ZSdkIGF2b2lkIG1ha2lu ZyB1cCBhIGJyYW5kIG5ldyB1c2Vyc3BhY2UgQVBJIGZvciB0aGlzLiBJdAo+IHdvdWxkIGJlIGdy ZWF0IGlmIHdlIGNvdWxkIHNvbWVob3cgbWFrZSB1c2Ugb2YgdGhlIGlwdGFibGVzIEFQSSwgd2hp Y2gKPiBhbHJlYWR5IGhhcyBzdXBwb3J0IGZvciBzcGVjaWZ5aW5nIHRoZXNlIGtpbmRzIG9mIGNv bmRpdGlvbnMuCgpUaGUgaXB0YWJsZXMgaW50ZXJmYWNlIGlzIG5pY2UgYnV0IG9ubHkgd29ya3Mg d2l0aCBuZXR3b3JrIHBhY2tldHMgYW5kCm5vdCBzb2NrZXRzIGFuZCBJJ2QgZmluZCBiaW5kKCkg cmVtYXBwaW5nIHZpYSBpcHRhYmxlcyByYXRoZXIgc3RyYW5nZS4KSSdtIGN1cnJlbnRseSB1c2lu ZyBpcHRhYmxlcyB0byBTTkFUIG91dGdvaW5nIGNvbm5lY3Rpb25zIHBlciB1aWQgYnV0CkkgZmlu ZCB0aGUgY2dyb3VwIGlkZWEgcmF0aGVyIGFwcGVhbGluZyAoYXMgbWFueSByZXNvdXJjZXMgYXMg cG9zc2libGUKbWFuYWdlZCBmcm9tIGEgc2luZ2xlIHZpcnR1YWwgZGlyZWN0b3J5IHdpdGggc2lt cGxlIHNoZWxsIHRvb2xzKS4KClNvLCBhcmUgeW91IG9wcG9zZWQgdG8gdGhlIGN1cnJlbnQgaW1w bGVtZW50YXRpb24gKHNpbmdsZSBJUCBhZGRyZXNzKSBvcgp0byB0aGUgaW50ZXJmYWNlIChhIGZp bGUgaW4gY2dyb3VwZnMpPwoKPiBJIGRpZCBvbmNlIGhhY2sgdG9nZXRoZXIgYSBwcm9vZi1vZi1j b25jZXB0IHRoYXQgbGV0IHlvdSB1c2UgaXB0YWJsZXMKPiBmb3IgY29udHJvbGxpbmcgY29ubmVj dC9hY2NlcHQvYmluZCBvcGVyYXRpb25zLCBidXQgaXQgd2FzIGEgY29tcGxldGUKPiBtZXNzIGFu ZCB3b3VsZG4ndCBzdXJ2aXZlIGNvZGUgcmV2aWV3IDotKQoKPHNodWRkZXI+IDopCgpCZXN0IHJl Z2FyZHMsCiBHcnplZ29yeiBOb3NlawpfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fXwpDb250YWluZXJzIG1haWxpbmcgbGlzdApDb250YWluZXJzQGxpc3RzLmxp bnV4LWZvdW5kYXRpb24ub3JnCmh0dHBzOi8vbGlzdHMubGludXgtZm91bmRhdGlvbi5vcmcvbWFp bG1hbi9saXN0aW5mby9jb250YWluZXJz