* [PATCH] iproute2: Fail "ip netns add" on existing network namespaces.
@ 2011-07-16 0:29 Eric W. Biederman
2011-08-31 18:05 ` Stephen Hemminger
0 siblings, 1 reply; 2+ messages in thread
From: Eric W. Biederman @ 2011-07-16 0:29 UTC (permalink / raw)
To: Stephen Hemminger; +Cc: netdev
Use O_EXCL so that we only create and mount a new network namespace
if there is no chance an existing network namespace is present.
Signed-off-by: Eric W. Biederman <ebiederm@xmission.com>
---
ip/ipnetns.c | 17 +++++------------
1 files changed, 5 insertions(+), 12 deletions(-)
diff --git a/ip/ipnetns.c b/ip/ipnetns.c
index dff3497..e41a598 100644
--- a/ip/ipnetns.c
+++ b/ip/ipnetns.c
@@ -41,16 +41,6 @@ static int setns(int fd, int nstype)
#endif /* HAVE_SETNS */
-static int touch(const char *path, mode_t mode)
-{
- int fd;
- fd = open(path, O_RDONLY|O_CREAT, mode);
- if (fd < 0)
- return -1;
- close(fd);
- return 0;
-}
-
static void usage(void) __attribute__((noreturn));
static void usage(void)
@@ -214,6 +204,7 @@ static int netns_add(int argc, char **argv)
*/
char netns_path[MAXPATHLEN];
const char *name;
+ int fd;
if (argc < 1) {
fprintf(stderr, "No netns name specified\n");
@@ -227,11 +218,13 @@ static int netns_add(int argc, char **argv)
mkdir(NETNS_RUN_DIR, S_IRWXU|S_IRGRP|S_IXGRP|S_IROTH|S_IXOTH);
/* Create the filesystem state */
- if (touch(netns_path, 0) < 0) {
+ fd = open(netns_path, O_RDONLY|O_CREAT|O_EXCL, 0);
+ if (fd < 0) {
fprintf(stderr, "Could not create %s: %s\n",
netns_path, strerror(errno));
- goto out_delete;
+ return -1;
}
+ close(fd);
if (unshare(CLONE_NEWNET) < 0) {
fprintf(stderr, "Failed to create a new network namespace: %s\n",
strerror(errno));
--
1.7.5.1.217.g4e3aa
^ permalink raw reply related [flat|nested] 2+ messages in thread
end of thread, other threads:[~2011-08-31 18:05 UTC | newest]
Thread overview: 2+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2011-07-16 0:29 [PATCH] iproute2: Fail "ip netns add" on existing network namespaces Eric W. Biederman
2011-08-31 18:05 ` Stephen Hemminger
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox