From: Hangbin Liu <[email protected]> Date: Thu, 9 May 2019 14:55:07 +0800
> With NET_ADMIN enabled in container, a normal user could be mapped to
> root and is able to change the real device's rx filter via ioctl on
> vlan, which would affect the other ptp process on host. Fix it by
> disabling SIOCSHWTSTAMP in container.
>
> Fixes: a6111d3c93d0 ("vlan: Pass SIOC[SG]HWTSTAMP ioctls to real device")
> Signed-off-by: Hangbin Liu <[email protected]>
Applied and queued up for -stable.
