Lee Duncan 688e8128b7 scsi: iscsi: Restrict sessions and handles to admin capabilities
Protect the iSCSI transport handle, available in sysfs, by requiring
CAP_SYS_ADMIN to read it. Also protect the netlink socket by restricting
reception of messages to ones sent with CAP_SYS_ADMIN. This disables
normal users from being able to end arbitrary iSCSI sessions.

Cc: stable@vger.kernel.org
Reported-by: Adam Nichols <adam@grimm-co.com>
Reviewed-by: Chris Leech <cleech@redhat.com>
Reviewed-by: Mike Christie <michael.christie@oracle.com>
Signed-off-by: Lee Duncan <lduncan@suse.com>
Signed-off-by: Martin K. Petersen <martin.petersen@oracle.com>
2021-03-04 20:09:50 -05:00
..
2021-01-22 21:14:09 -05:00
2020-12-16 13:34:31 -08:00
2020-12-09 12:14:41 -05:00
2020-12-16 13:34:31 -08:00
2020-03-11 23:07:59 -04:00
2020-12-16 13:34:31 -08:00
2021-02-22 10:24:58 -08:00
2021-01-13 00:15:13 -05:00
2021-02-28 11:51:20 -08:00
2021-01-22 21:14:07 -05:00
2021-01-22 21:14:07 -05:00
2021-01-22 21:14:08 -05:00
2021-01-22 21:14:08 -05:00
2021-01-22 21:14:07 -05:00
2021-01-22 21:14:07 -05:00
2020-10-23 16:19:02 -07:00
2021-02-22 10:24:58 -08:00
2021-02-22 10:24:58 -08:00
2021-01-22 21:14:08 -05:00
2020-02-24 14:54:25 -05:00
2020-03-11 23:07:59 -04:00
2020-09-02 22:49:06 -04:00
2020-08-23 17:36:59 -05:00
2020-10-26 18:23:24 -04:00
2020-12-07 20:24:09 -05:00
2021-01-22 21:14:07 -05:00
2020-10-14 15:15:35 -07:00
2021-01-26 22:11:17 -05:00
2020-12-07 20:24:09 -05:00
2020-12-07 20:24:09 -05:00
2021-01-22 21:14:09 -05:00
2020-08-23 17:36:59 -05:00
2021-01-22 22:23:42 -05:00
2020-10-14 15:15:35 -07:00
2021-02-22 10:24:58 -08:00
2021-02-22 10:24:58 -08:00
2021-02-22 10:24:58 -08:00
2020-06-19 23:06:43 -04:00
2020-12-01 14:53:39 -07:00
2021-02-28 11:51:20 -08:00
2021-02-22 22:39:44 -05:00
2020-10-14 15:15:35 -07:00
2019-07-11 15:14:01 -07:00
2020-02-24 15:01:57 -05:00
2021-01-22 21:14:10 -05:00
2020-10-14 15:15:35 -07:00
2021-01-22 21:14:12 -05:00
2019-07-11 15:14:01 -07:00