# \[PATCH\] net: don't unnecessarily load kernel modules in dev\_ioctl()

- From: David Miller \<davem@davemloft.net\>
- Date: 2018-03-08 18:11:15 
- List: linux-security-module
- Page: https://ratatoskr.run/linux-security-module/2018/03/11085952
- Thread: https://ratatoskr.run/linux-security-module/2018/03/11085952/t.md

```text
From: Eric Dumazet <redacted>
Date: Thu, 8 Mar 2018 10:05:12 -0800

> Another problematic legacy behavior is the automatic creation of
> fallback tunnels, which hurts netns creation/deletion.
> 
> Some environments want to create a netns for every job/task, and they
> do not care if the init netns has these tunnels or not.
> 
> We have a local patch adding yet another knob to control this, since
> it saves a lot of cpu cycles (about 10ms per netns create/delete pair
> here)

Yeah, understood.  At small scale the current behavior maybe made
sense, but these days it really doesn't.

No objections to the knob if you want to submit it.
--
To unsubscribe from this list: send the line "unsubscribe linux-security-module" in
the body of a message to majordomo at vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
```