From: Paolo Abeni Date: Tue, 27 Sep 2022 09:31:54 +0000 (+0200) Subject: Merge branch 'net-openvswitch-metering-and-conntrack-in-userns' X-Git-Tag: v6.1-rc5~319^2~93 X-Git-Url: http://review.tizen.org/git/?a=commitdiff_plain;h=5591b021e00ca8cd92487a9dbccb6d6da9476a8d;p=platform%2Fkernel%2Flinux-starfive.git Merge branch 'net-openvswitch-metering-and-conntrack-in-userns' Michael Weiß says: ==================== net: openvswitch: metering and conntrack in userns Currently using openvswitch in a non-initial user namespace, e.g., an unprivileged container, is possible but without metering and conntrack support. This is due to the restriction of the corresponding Netlink interfaces to the global CAP_NET_ADMIN. This simple patches switch from GENL_ADMIN_PERM to GENL_UNS_ADMIN_PERM in several cases to allow this also for the unprivileged container use case. We tested this for unprivileged containers created by the container manager of GyroidOS (gyroidos.github.io). However, for other container managers such as LXC or systemd which provide unprivileged containers this should be apply equally. ==================== Link: https://lore.kernel.org/r/20220923133820.993725-1-michael.weiss@aisec.fraunhofer.de Signed-off-by: Paolo Abeni --- 5591b021e00ca8cd92487a9dbccb6d6da9476a8d