From: Daniel Lezcano <daniel.lezcano@free•fr>
To: "Martín Ferrari" <martin.ferrari@gmail•com>
Cc: netdev <netdev@vger•kernel.org>,
Mathieu Lacage <mathieu.lacage@sophia•inria.fr>
Subject: Re: Question about netns & AF_UNIX
Date: Thu, 27 May 2010 22:16:28 +0200 [thread overview]
Message-ID: <4BFED31C.2070702@free.fr> (raw)
In-Reply-To: <AANLkTikBuXfzS-UIL7bDMvfpL5lx9gMqHTpGg-jrm5Zv@mail.gmail.com>
On 05/27/2010 04:38 PM, Martín Ferrari wrote:
> Hi, again a question about netns...
>
> I seem to recall being able to use AF_UNIX sockets across network name
> spaces, but I cannot reproduce that with a current kernel. Probably my
> test was fubar (I've lost the script).
>
No, that was never the case. Maybe you tested with a patched kernel
allowing to cross-namespace connect.
> In any case: is a design decision to forbid this, even when the file
> system is shared? I found some discussions from 2008, but I don't see
> an agreement being reached...
>
There was a discussion about that but with a simple hack removing the
test against the namespace when connecting.
The problem is nobody investigated that against credentials in ancillary
messages, or other particularity of the af_unix socket vs the namespaces.
> I also wonder if filedescriptor passing thru ancilliary messages will
> work (that is, with unix sockets that I've created before the netns
> change).
>
Yes.
Thanks
-- Daniel
prev parent reply other threads:[~2010-05-27 20:16 UTC|newest]
Thread overview: 4+ messages / expand[flat|nested] mbox.gz Atom feed top
2010-05-27 14:38 Question about netns & AF_UNIX Martín Ferrari
2010-05-27 18:08 ` Dan Smith
2010-05-31 9:19 ` Martín Ferrari
2010-05-27 20:16 ` Daniel Lezcano [this message]
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=4BFED31C.2070702@free.fr \
--to=daniel.lezcano@free$(echo .)fr \
--cc=martin.ferrari@gmail$(echo .)com \
--cc=mathieu.lacage@sophia$(echo .)inria.fr \
--cc=netdev@vger$(echo .)kernel.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox