[kernel-hardening] networking restrictions

Vasiliy Kulikov
2011-07-29T09:09:07Z

Hi,

Looks like it touches the restrictions of per net_ns socket
creation/usage:

https://lwn.net/Articles/368730/

However, I want to implement it as a cgroup policy similar to device
creation/usage restriction. AFAICS, cgroup was not suggested in the
topic.

Thanks,

--
Vasiliy