On Sun, Jan 5, 2025 at 12:29 PM Al Viro [off-list ref] wrote:
On Sun, Jan 05, 2025 at 09:32:36AM +0100, Eric Dumazet wrote:
quoted
According to grep, we have many other places directly reading
current->nsproxy->net_ns
For instance in net/sctp/sysctl.c
Should we change them all ?
Depends - do you want their contents match the netns of opener (as,
AFAICS, for ipv4 sysctls) or that of the reader?
I am only worried that a malicious user could crash the host with
current kernels,
not about this MPTP crash, but all unaware users of current->nsproxy
in sysctl handlers.
Back to MPTCP :
Using the convention used in other mptcp sysctls like (enabled,
add_addr_timeout,
checksum_enabled, allow_join_initial_addr_port...) is better for consistency.