Michal Kubeček 2851940ffe netfilter: allow logging from non-init namespaces ... Commit 69b34fb996 ("netfilter: xt_LOG: add net namespace support for xt_LOG") disabled logging packets using the LOG target from non-init namespaces. The motivation was to prevent containers from flooding kernel log of the host. The plan was to keep it that way until syslog namespace implementation allows containers to log in a safe way. However, the work on syslog namespace seems to have hit a dead end somewhere in 2013 and there are users who want to use xt_LOG in all network namespaces. This patch allows to do so by setting /proc/sys/net/netfilter/nf_log_all_netns to a nonzero value. This sysctl is only accessible from init_net so that one cannot switch the behaviour from inside a container. Signed-off-by: Michal Kubecek <mkubecek@suse.cz> Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>		2017-02-02 14:31:58 +01:00
..
acpi	More ACPI updates for v4.10-rc1	2016-12-22 10:19:32 -08:00
asm-generic	Replace <asm/uaccess.h> with <linux/uaccess.h> globally	2016-12-24 11:46:01 -08:00
clocksource
crypto	This pull contains one set of changes: a conversion of the crypto DocBook	2016-12-17 16:00:34 -08:00
drm	Replace <asm/uaccess.h> with <linux/uaccess.h> globally	2016-12-24 11:46:01 -08:00
dt-bindings	dt: bindings: net: use boolean dt properties for eee broken modes	2016-12-20 13:50:50 -05:00
keys
kvm	clocksource: Use a plain u64 instead of cycle_t	2016-12-25 11:04:12 +01:00
linux	netfilter: merge ctinfo into nfct pointer storage area	2017-02-02 14:31:56 +01:00
math-emu
media
memory
misc
net	netfilter: allow logging from non-init namespaces	2017-02-02 14:31:58 +01:00
pcmcia
ras
rdma	Replace <asm/uaccess.h> with <linux/uaccess.h> globally	2016-12-24 11:46:01 -08:00
rxrpc
scsi
soc	powerpc updates for 4.10	2016-12-16 09:26:42 -08:00
sound
target	Merge branch 'scsi-target-for-v4.10' of git://git.kernel.org/pub/scm/linux/kernel/git/bvanassche/linux	2016-12-21 10:16:05 -08:00
trace	Merge branch 'timers-urgent-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip	2016-12-25 14:30:04 -08:00
uapi	netfilter: nft_ct: add average bytes per packet support	2017-01-03 14:33:26 +01:00
video
xen
Kbuild