An error occurred fetching the project authors.
  1. 01 Oct, 2008 1 commit
  2. 28 Aug, 2008 1 commit
  3. 27 Aug, 2008 1 commit
  4. 25 Aug, 2008 1 commit
  5. 15 Aug, 2008 1 commit
    • Herbert Xu's avatar
      ipv4: Disable route secret interval on zero interval · c6153b5b
      Herbert Xu authored
      Let me first state that disabling the route cache hash rebuild
      should not be done without extensive analysis on the risk profile
      and careful deliberation.
      
      However, there are times when this can be done safely or for
      testing.  For example, when you have mechanisms for ensuring
      that offending parties do not exist in your network.
      
      This patch lets the user disable the rebuild if the interval is
      set to zero.  This also incidentally fixes a divide-by-zero error
      with name-spaces.
      
      In addition, this patch makes the effect of an interval change
      immediate rather than it taking effect at the next rebuild as
      is currently the case.
      Signed-off-by: default avatarHerbert Xu <herbert@gondor.apana.org.au>
      Signed-off-by: default avatarDavid S. Miller <davem@davemloft.net>
      c6153b5b
  6. 07 Aug, 2008 1 commit
  7. 06 Aug, 2008 1 commit
  8. 01 Aug, 2008 2 commits
  9. 27 Jul, 2008 3 commits
    • Al Viro's avatar
      missing bits of net-namespace / sysctl · eeb61f71
      Al Viro authored
      Piss-poor sysctl registration API strikes again, film at 11...
      
      What we really need is _pathname_ required to be present in already
      registered table, so that kernel could warn about bad order.  That's the
      next target for sysctl stuff (and generally saner and more explicit
      order of initialization of ipv[46] internals wouldn't hurt either).
      
      For the time being, here are full fixups required by ..._rotable()
      stuff; we make per-net sysctl sets descendents of "ro" one and make sure
      that sufficient skeleton is there before we start registering per-net
      sysctls.
      Signed-off-by: default avatarAl Viro <viro@zeniv.linux.org.uk>
      Signed-off-by: default avatarLinus Torvalds <torvalds@linux-foundation.org>
      eeb61f71
    • Al Viro's avatar
      net: missing bits of net-namespace / sysctl · 6f9f489a
      Al Viro authored
      Piss-poor sysctl registration API strikes again, film at 11...
      What we really need is _pathname_ required to be present in
      already registered table, so that kernel could warn about bad
      order.  That's the next target for sysctl stuff (and generally
      saner and more explicit order of initialization of ipv[46]
      internals wouldn't hurt either).
      
      For the time being, here are full fixups required by ..._rotable()
      stuff; we make per-net sysctl sets descendents of "ro" one and
      make sure that sufficient skeleton is there before we start registering
      per-net sysctls.
      Signed-off-by: default avatarAl Viro <viro@zeniv.linux.org.uk>
      Signed-off-by: default avatarDavid S. Miller <davem@davemloft.net>
      6f9f489a
    • Hugh Dickins's avatar
      netns: fix ip_rt_frag_needed rt_is_expired · 6c3b8fc6
      Hugh Dickins authored
      Running recent kernels, and using a particular vpn gateway, I've been
      having to edit my mails down to get them accepted by the smtp server.
      
      Git bisect led to commit e84f84f2 -
      netns: place rt_genid into struct net.  The conversion from a != test
      to rt_is_expired() put one negative too many: and now my mail works.
      Signed-off-by: default avatarHugh Dickins <hugh@veritas.com>
      Acked-by: default avatarDenis V. Lunev <den@openvz.org>
      Signed-off-by: default avatarDavid S. Miller <davem@davemloft.net>
      6c3b8fc6
  10. 17 Jul, 2008 1 commit
  11. 08 Jul, 2008 1 commit
  12. 06 Jul, 2008 8 commits
  13. 12 Jun, 2008 1 commit
  14. 03 Jun, 2008 1 commit
  15. 20 May, 2008 1 commit
    • Herbert Xu's avatar
      ipsec: Use the correct ip_local_out function · 1ac06e03
      Herbert Xu authored
      Because the IPsec output function xfrm_output_resume does its
      own dst_output call it should always call __ip_local_output
      instead of ip_local_output as the latter may invoke dst_output
      directly.  Otherwise the return values from nf_hook and dst_output
      may clash as they both use the value 1 but for different purposes.
      
      When that clash occurs this can cause a packet to be used after
      it has been freed which usually leads to a crash.  Because the
      offending value is only returned from dst_output with qdiscs
      such as HTB, this bug is normally not visible.
      
      Thanks to Marco Berizzi for his perseverance in tracking this
      down.
      Signed-off-by: default avatarHerbert Xu <herbert@gondor.apana.org.au>
      Signed-off-by: default avatarDavid S. Miller <davem@davemloft.net>
      1ac06e03
  16. 05 May, 2008 2 commits
  17. 29 Apr, 2008 1 commit
  18. 24 Apr, 2008 1 commit
  19. 14 Apr, 2008 1 commit
  20. 10 Apr, 2008 4 commits
  21. 25 Mar, 2008 4 commits
  22. 23 Mar, 2008 2 commits