[PATCH openEuler-5.10 17/92] netfilter: ipvs: make global sysctl readonly in non-init netns