Re: [PATCHv2 net] openvswitch: Scrub skb between namespaces

2015-10-18 Thread David Miller
From: Joe Stringer Date: Fri, 16 Oct 2015 11:08:18 -0700 > If OVS receives a packet from another namespace, then the packet should > be scrubbed. However, people have already begun to rely on the behaviour > that skb->mark is preserved across namespaces, so retain this one field. > > This is mai

Re: [PATCHv2 net] openvswitch: Scrub skb between namespaces

2015-10-17 Thread Thomas Graf
On 10/16/15 at 11:08am, Joe Stringer wrote: > If OVS receives a packet from another namespace, then the packet should > be scrubbed. However, people have already begun to rely on the behaviour > that skb->mark is preserved across namespaces, so retain this one field. > > This is mainly to address

Re: [PATCHv2 net] openvswitch: Scrub skb between namespaces

2015-10-16 Thread Pravin Shelar
On Fri, Oct 16, 2015 at 11:08 AM, Joe Stringer wrote: > If OVS receives a packet from another namespace, then the packet should > be scrubbed. However, people have already begun to rely on the behaviour > that skb->mark is preserved across namespaces, so retain this one field. > > This is mainly t

[PATCHv2 net] openvswitch: Scrub skb between namespaces

2015-10-16 Thread Joe Stringer
If OVS receives a packet from another namespace, then the packet should be scrubbed. However, people have already begun to rely on the behaviour that skb->mark is preserved across namespaces, so retain this one field. This is mainly to address information leakage between namespaces when using OVS