iv/linux
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
linux/net
History
Yang Yang 8292d7f6e8 net: ipv4: add capability check for net administration 
Root in init user namespace can modify /proc/sys/net/ipv4/ip_forward
without CAP_NET_ADMIN, this doesn't follow the principle of
capabilities. For example, let's take a look at netdev_store(),
root can't modify netdev attribute without CAP_NET_ADMIN.
So let's keep the consistency of permission check logic.

Reported-by: Zeal Robot <zealci@zte.com.cn>
Signed-off-by: Yang Yang <yang.yang29@zte.com.cn>
Signed-off-by: David S. Miller <davem@davemloft.net>
2021-07-20 07:15:22 -07:00
..
6lowpan
6lowpan: Fix some typos in nhc_udp.c
2021-03-24 17:52:11 -07:00
9p
9p/trans_virtio: Fix spelling mistakes
2021-06-02 14:01:55 -07:00
802
net/802/garp: fix memleak in garp_request_join()
2021-07-01 11:21:57 -07:00
8021q
memcg: enable accounting for VLAN group array
2021-07-20 06:00:38 -07:00
appletalk
Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net
2021-06-18 19:47:02 -07:00
atm
atm: Use list_for_each_entry() to simplify code in resources.c
2021-06-10 14:08:09 -07:00
ax25
net/ax25: Delete obsolete TODO file
2021-03-30 16:54:50 -07:00
batman-adv
Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net
2021-06-18 19:47:02 -07:00
bluetooth
TTY / Serial patches for 5.14-rc1
2021-07-05 14:08:24 -07:00
bpf
bpf: Support specifying ingress via xdp_md context in BPF_PROG_TEST_RUN
2021-07-07 19:51:13 -07:00
bpfilter
bpfilter: Specify the log level for the kmsg message
2021-06-25 13:13:50 +02:00
bridge
net: bridge: vlan: add mcast snooping control
2021-07-20 05:41:20 -07:00
caif
net: sock: introduce sk_error_report
2021-06-29 11:28:21 -07:00
can
Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net
2021-06-29 15:45:27 -07:00
ceph
Networking changes for 5.14.
2021-06-30 15:51:09 -07:00
core
memcg: enable accounting for scm_fp_list objects
2021-07-20 06:00:38 -07:00
dcb
net: dcb: Return the correct errno code
2021-06-01 17:01:33 -07:00
dccp
memcg: enable accounting for inet_bin_bucket cache
2021-07-20 06:00:38 -07:00
decnet
decnet: Fix spelling mistakes
2021-06-02 14:01:55 -07:00
dns_resolver
net: remove redundant 'depends on NET'
2021-01-27 17:04:12 -08:00
dsa
net: dsa: use switchdev_handle_fdb_{add,del}_to_device
2021-07-20 07:04:27 -07:00
ethernet
of: net: pass the dst buffer to of_get_mac_address()
2021-04-13 14:35:02 -07:00
ethtool
net: sock: extend SO_TIMESTAMPING for PHC binding
2021-07-01 13:08:18 -07:00
hsr
net: hsr: don't check sequence number if tag removal is offloaded
2021-06-16 12:13:01 -07:00
ieee802154
ieee802154: fix error return code in ieee802154_llsec_getparams()
2021-06-03 10:59:49 +02:00
ife
net: remove redundant 'depends on NET'
2021-01-27 17:04:12 -08:00
ipv4
net: ipv4: add capability check for net administration
2021-07-20 07:15:22 -07:00
ipv6
memcg: ipv6/sit: account and don't WARN on ip_tunnel_prl structs allocation
2021-07-20 06:00:38 -07:00
iucv
s390: iucv: Avoid field over-reading memcpy()
2021-07-01 15:54:01 -07:00
kcm
net: sock: introduce sk_error_report
2021-06-29 11:28:21 -07:00
key
net: Remove unnecessary variables
2021-05-26 07:03:39 +02:00
l2tp
l2tp: Fix spelling mistakes
2021-06-07 14:08:30 -07:00
l3mdev
l3mdev: Correct function names in the kerneldoc comments
2021-03-28 17:56:55 -07:00
lapb
net: lapb: Use list_for_each_entry() to simplify code in lapb_iface.c
2021-06-08 16:31:25 -07:00
llc
llc2: Remove redundant assignment to rc
2021-04-27 14:16:14 -07:00
mac80211
mac80211: Switch to a virtual time-based airtime scheduler
2021-06-23 18:12:00 +02:00
mac802154
net: mac802154: Fix general protection fault
2021-04-06 22:42:16 +02:00
mpls
mpls: Remove redundant assignment to err
2021-04-27 14:17:00 -07:00
mptcp
net: Use nlmsg_unicast() instead of netlink_unicast()
2021-07-13 09:28:29 -07:00
ncsi
net/ncsi: add dummy response handler for Intel boards
2021-07-08 14:16:39 -07:00
netfilter
netfilter: nft_last: incorrect arithmetics when restoring last used
2021-07-06 14:15:13 +02:00
netlabel
netlabel: Fix memory leak in netlbl_mgmt_add_common
2021-06-15 11:19:04 -07:00
netlink
netlink: Deal with ESRCH error in nlmsg_notify()
2021-07-20 11:45:09 +02:00
netrom
net: netrom: Fix fall-through warnings for Clang
2021-05-17 19:57:08 -05:00
nfc
TTY / Serial patches for 5.14-rc1
2021-07-05 14:08:24 -07:00
nsh
…
openvswitch
openvswitch: Introduce per-cpu upcall dispatch
2021-07-16 11:06:33 -07:00
packet
Networking changes for 5.14.
2021-06-30 15:51:09 -07:00
phonet
…
psample
psample: Add additional metadata attributes
2021-03-14 15:00:43 -07:00
qrtr
net: sock: introduce sk_error_report
2021-06-29 11:28:21 -07:00
rds
Networking changes for 5.14.
2021-06-30 15:51:09 -07:00
rfkill
Another set of updates, all over the map:
2021-04-20 16:44:04 -07:00
rose
net: rose: Fix fall-through warnings for Clang
2021-03-10 12:45:15 -08:00
rxrpc
Networking changes for 5.14.
2021-06-30 15:51:09 -07:00
sched
net/sched: Remove unnecessary if statement
2021-07-16 10:46:35 -07:00
sctp
net: Use nlmsg_unicast() instead of netlink_unicast()
2021-07-13 09:28:29 -07:00
smc
net: sock: introduce sk_error_report
2021-06-29 11:28:21 -07:00
strparser
net: sock: introduce sk_error_report
2021-06-29 11:28:21 -07:00
sunrpc
NFS client updates for Linux 5.14
2021-07-09 09:43:57 -07:00
switchdev
net: switchdev: introduce a fanout helper for SWITCHDEV_FDB_{ADD,DEL}_TO_DEVICE
2021-07-20 07:04:27 -07:00
tipc
tipc: keep the skb in rcv queue until the whole data is read
2021-07-16 17:28:09 -07:00
tls
Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net
2021-06-29 15:45:27 -07:00
unix
Merge git://git.kernel.org/pub/scm/linux/kernel/git/bpf/bpf-next
2021-07-15 22:40:10 -07:00
vmw_vsock
Networking changes for 5.14.
2021-06-30 15:51:09 -07:00
wireless
cfg80211: Support hidden AP discovery over 6GHz band
2021-06-23 13:05:09 +02:00
x25
net: x25: Use list_for_each_entry() to simplify code in x25_route.c
2021-06-10 14:08:09 -07:00
xdp
Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net
2021-06-29 15:45:27 -07:00
xfrm
Networking changes for 5.14.
2021-06-30 15:51:09 -07:00
compat.c
net: Return the correct errno code
2021-06-03 15:13:56 -07:00
devres.c
net: devres: Correct a grammatical error
2021-06-11 12:55:28 -07:00
Kconfig
bpf, kconfig: Add consolidated menu entry for bpf with core options
2021-05-11 13:56:16 -07:00
Makefile
net: l3mdev: use obj-$(CONFIG_NET_L3_MASTER_DEV) form in net/Makefile
2021-01-27 17:03:52 -08:00
socket.c
net: socket: support hardware timestamp conversion to PHC bound
2021-07-01 13:08:18 -07:00
sysctl_net.c
net: Ensure net namespace isolation of sysctls
2021-04-12 13:27:11 -07:00