From: Herbert Poetzl (herbert_at_13thfloor.at)
Date: Fri 16 Apr 2004 - 17:27:20 BST
On Fri, Apr 16, 2004 at 05:31:47PM +0200, Sascha Silbe wrote:
> On Tue, 23 Mar 2004 15:48:36 +0100, Herbert Poetzl <herbert_at_13thfloor.at> wrote:
>
> > * the 'secure ipv6 on host' patch was added
> > (kudos go to Ivo De Decker)
> That breaks several of my VServers since they do use IPv6.
> Could you please split that out into a separate patch?
> Otherwise I would have to review and manually apply each chunk of the net
> patch. :(
ahem, you know that ipv6 doesn't work with stable
vserver since ever, so you are basically using only
the chcontext(), not the chbind()?
aside from that, no problem, just revert the following
patch:
diff -NurpP --minimal linux-2.4.25-vs1.26/net/socket.c linux-2.4.25-vs1.27/net/socket.c
--- linux-2.4.25-vs1.26/net/socket.c 2004-02-18 14:36:32.000000000 +0100
+++ linux-2.4.25-vs1.27/net/socket.c 2004-03-23 15:06:51.000000000 +0100
@@ -834,6 +834,10 @@ int sock_create(int family, int type, in
if (type < 0 || type >= SOCK_MAX)
return -EINVAL;
+ /* do not allow ipv6 inside vservers */
+ if (family == PF_INET6 && !vx_check(0, VX_ADMIN))
+ return -EAFNOSUPPORT;
+
/* Compatibility.
This uglymoron is moved from INET layer to here to avoid
HTH,
Herbert
> CU Sascha
>
> --
> Registered Linux User #77587 (http://counter.li.org/)
>
> bomb terrorist afghanistan PGP encrypt CIA FBI BND MAD StaSi anschlag strike
> sex pussy xxx kill bj hitler Gates MS Windows ZV ZDV
>
> _______________________________________________
> Vserver mailing list
> Vserver_at_list.linux-vserver.org
> http://list.linux-vserver.org/mailman/listinfo/vserver
_______________________________________________
Vserver mailing list
Vserver_at_list.linux-vserver.org
http://list.linux-vserver.org/mailman/listinfo/vserver