From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1751808AbcBLQJM (ORCPT ); Fri, 12 Feb 2016 11:09:12 -0500 Received: from mail-yw0-f170.google.com ([209.85.161.170]:35404 "EHLO mail-yw0-f170.google.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1750902AbcBLQJI (ORCPT ); Fri, 12 Feb 2016 11:09:08 -0500 X-Greylist: delayed 167799 seconds by postgrey-1.27 at vger.kernel.org; Fri, 12 Feb 2016 11:09:08 EST Date: Fri, 12 Feb 2016 11:09:06 -0500 From: Tejun Heo To: Alban Crequy Cc: LXC development mailing-list , "linux-kernel@vger.kernel.org" , Aditya Kali , Linux API , Linux Containers , Johannes Weiner , gregkh@linuxfoundation.org, cgroups@vger.kernel.org, Andrew Morton Subject: Re: [lxc-devel] CGroup Namespaces (v10) Message-ID: <20160212160906.GG3741@mtj.duckdns.org> References: <1454057651-23959-1-git-send-email-serge.hallyn@ubuntu.com> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: User-Agent: Mutt/1.5.24 (2015-08-30) Sender: linux-kernel-owner@vger.kernel.org List-ID: X-Mailing-List: linux-kernel@vger.kernel.org Hello, On Fri, Feb 12, 2016 at 12:18:28AM +0100, Alban Crequy wrote: > I just noticed commit c38c4597e4bf ("netfilter: implement xt_cgroup > cgroup2 path match") which, as far as I understand, introduces a new > userland facing API containing the full cgroup path. Does it mean that > the cgroupns patchset should include cgroup path translation in > xt_cgroup? I don't think so. None of netfilter configuration is namespaced in any way. They're system-global by nature. Thanks. -- tejun