From ac0b251058b6eabc89793852008f786565a4eeac Mon Sep 17 00:00:00 2001 From: Joe Stringer Date: Wed, 4 May 2016 18:01:03 -0700 Subject: [PATCH] system-traffic: Drop auto ct helpers in namespaces. Automatic helper assignment in conntrack can trigger an upstream bug where namespace deletion followed by immediate unload of conntrack helper modules may cause kernel crashes. Disable automatic helper assignment within created namespaces to avoid this issue. Signed-off-by: Joe Stringer Acked-by: Jarno Rajahalme --- tests/system-common-macros.at | 1 + 1 file changed, 1 insertion(+) diff --git a/tests/system-common-macros.at b/tests/system-common-macros.at index 2c8e2a90c..52ab7ff56 100644 --- a/tests/system-common-macros.at +++ b/tests/system-common-macros.at @@ -17,6 +17,7 @@ m4_define([ADD_NAMESPACES], [DEL_NAMESPACES(ns) AT_CHECK([ip netns add ns || return 77]) on_exit 'DEL_NAMESPACES(ns)' + ip netns exec ns sysctl -w net.netfilter.nf_conntrack_helper=0 ]) ] ) -- 2.20.1