From mboxrd@z Thu Jan 1 00:00:00 1970 From: Florian Westphal Subject: Re: [PATCH v5 0/5] netfilter: exit_net checks for objects initialized in net_init hook Date: Sun, 12 Nov 2017 12:44:57 +0100 Message-ID: <20171112114457.GM5512@breakpoint.cc> References: <2f512ef8-8bb8-c227-1cde-1be56ae4c3ec@virtuozzo.com> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Cc: netfilter-devel@vger.kernel.org, Pablo Neira Ayuso , Jozsef Kadlecsik , Florian Westphal , coreteam@netfilter.org To: Vasily Averin Return-path: Received: from Chamillionaire.breakpoint.cc ([146.0.238.67]:43320 "EHLO Chamillionaire.breakpoint.cc" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1751101AbdKLLpk (ORCPT ); Sun, 12 Nov 2017 06:45:40 -0500 Content-Disposition: inline In-Reply-To: <2f512ef8-8bb8-c227-1cde-1be56ae4c3ec@virtuozzo.com> Sender: netfilter-devel-owner@vger.kernel.org List-ID: Vasily Averin wrote: > OpenVz kernel team have a long history of fighting against namespace-related bugs, > some of them could be excluded by using simple checks described below. > > One of typical errors is related to live cycle of namespaces: > usually objects created for some namespace should not live longer than namespace itself. These changes look good to me, thank you.