Re: [PATCH 17/16] net: Disable netfilter sockopts when not in the initial network namespace

Pavel Emelyanov [off-list ref] writes:

Eric W. Biederman wrote:

quoted

Until we support multiple network namespaces with netfilter only allow
netfilter configuration in the initial network namespace.

PATCH 17/16? :)

Exactly!

If my target was the core of the networking stack I figured I better
include the change that keeps netfilter commands isolated to the
initial network namespace, and in my review of completeness I had
missed that in my first pass through my patches.

Eric