neigh: only allow init_net to change the default neigh_parms
Though we don't export the /proc/sys/net/ipv[4,6]/neigh/default/ directory to the un-init_net, but we can still use cmd such as "ip ntable change name arp_cache locktime 129" to change the locktime of default neigh_parms. This patch disallows the un-init_net to find out the neigh_table.parms. So the un-init_net will failed to influence the init_net. Signed-off-by: Gao feng <gaofeng@cn.fujitsu.com> Signed-off-by: David S. Miller <davem@davemloft.net>
This commit is contained in:
parent
cf89d6b280
commit
170d6f9954
|
@ -1419,7 +1419,7 @@ static inline struct neigh_parms *lookup_neigh_parms(struct neigh_table *tbl,
|
|||
|
||||
for (p = &tbl->parms; p; p = p->next) {
|
||||
if ((p->dev && p->dev->ifindex == ifindex && net_eq(neigh_parms_net(p), net)) ||
|
||||
(!p->dev && !ifindex))
|
||||
(!p->dev && !ifindex && net_eq(net, &init_net)))
|
||||
return p;
|
||||
}
|
||||
|
||||
|
|
Loading…
Reference in New Issue