NamespacedBy returns the namespace of the Linux kernel for a sysctl, or UnknownNamespace if the sysctl is not known to be namespaced.

NewRuntimeAdmitHandler returns a sysctlRuntimeAdmitHandler which checks whether the given runtime support sysctls.

NewWhitelist creates a new Whitelist from a list of sysctls and sysctl pattern (ending in *).

SafeSysctlWhitelist returns the whitelist of safe sysctls and safe sysctl patterns (ending in *).

the Linux IPC namespace.

the network namespace.

the zero value if no namespace is known.

Whitelist provides a list of allowed sysctls and sysctl patterns (ending in *) and a function to check whether a given sysctl matches this list.

Namespace represents a kernel namespace name.