Eric Paris c84b3268da net: check kern before calling security subsystem
Before calling capable(CAP_NET_RAW) check if this operations is on behalf
of the kernel or on behalf of userspace.  Do not do the security check if
it is on behalf of the kernel.

Signed-off-by: Eric Paris <eparis@redhat.com>
Acked-by: Arnaldo Carvalho de Melo <acme@redhat.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
2009-11-05 22:18:18 -08:00
..
2008-10-29 12:52:50 -07:00
2009-10-18 21:31:59 -07:00
2009-09-14 17:03:05 -07:00
2009-09-14 17:03:05 -07:00
2009-09-14 17:03:05 -07:00
2009-10-20 18:55:45 -07:00
2009-09-02 18:05:33 -07:00
2009-11-02 03:42:40 -08:00
2009-09-14 17:03:05 -07:00
2009-10-07 14:50:30 -07:00
2009-06-03 02:51:04 -07:00
2009-08-05 10:42:58 -07:00
2009-09-14 17:03:05 -07:00
2009-09-14 17:03:05 -07:00
2008-11-25 17:59:52 -08:00
2009-06-03 02:51:04 -07:00
2009-06-03 02:51:04 -07:00
2009-10-24 06:07:57 -07:00