It is being used that way: https://github.com/opensourcerouting/frr/blob/2b48e4f97fb02133f3a09db067dc8249ed41e968/lib/keyctl.c#L593 https://github.com/opensour

It is being used that way: https://github.com/opensourcerouting/frr/blob/2b48e4f97fb02133f3a09db067dc8249ed41e968/lib/keyctl.c#L593 https://github.com/opensourcerouting/frr/blob/2b48e4f97fb021... And, sure, if it breaks system security it's pointless. But so did "dirty pipe". I do agree the number of issues in AF_ALG is annoying, which is why I suggested a CAP_* restriction. Maybe CAP_SYS_ADMIN in init_ns, that's kinda the big hammer.