[rh7,7/8] ve/bridge: handle netlink messages AF_BRIDGE / RTM_[GSD]ETLINK sent from inside a Container

Submitted by Konstantin Khorenko on Feb. 21, 2020, 4:07 p.m.

Details

Message ID 20200221160731.16888-8-khorenko@virtuozzo.com
State New
Series "enable running Kubernetes inside a Container"
Headers show

Commit Message

Konstantin Khorenko Feb. 21, 2020, 4:07 p.m.
Weave network pluging for Kubernetes configures bridge via netlink,
so need to allow appropriate netlink messages if sent inside a
Container.

https://jira.sw.ru/browse/PSBM-92107

Signed-off-by: Konstantin Khorenko <khorenko@virtuozzo.com>
---
 kernel/ve/ve.c | 3 +++
 1 file changed, 3 insertions(+)

Patch hide | download patch | download mbox

diff --git a/kernel/ve/ve.c b/kernel/ve/ve.c
index f3970e8ef0f6a..b423a96766794 100644
--- a/kernel/ve/ve.c
+++ b/kernel/ve/ve.c
@@ -221,6 +221,9 @@  int vz_security_family_check(struct net *net, int family, int type)
 				case RTM_NEWNEIGH:
 				case RTM_DELNEIGH:
 				case RTM_GETNEIGH:
+				case RTM_GETLINK:
+				case RTM_DELLINK:
+				case RTM_SETLINK:
 					return 0;
 			}
 	default: