Harald Welte 37d2e7a20d [NETFILTER] nfnetlink: unconditionally require CAP_NET_ADMIN ...

This patch unconditionally requires CAP_NET_ADMIN for all nfnetlink
messages.  It also removes the per-message cap_required field, since all
existing subsystems use CAP_NET_ADMIN for all their messages anyway.

Patrick McHardy owes me a beer if we ever need to re-introduce this.

Signed-off-by: Harald Welte <laforge@netfilter.org>
Signed-off-by: David S. Miller <davem@davemloft.net>

2005-11-14 15:24:59 -08:00

..

arp_tables.c

[NETFILTER]: Add "revision" support to arp_tables and ip6_tables

2005-10-31 16:36:08 -02:00

arpt_mangle.c

Linux-2.6.12-rc2

2005-04-16 15:20:36 -07:00

arptable_filter.c

Linux-2.6.12-rc2

2005-04-16 15:20:36 -07:00

ip_conntrack_amanda.c

[NETFILTER] Fix conntrack event cache deadlock/oops

2005-09-22 23:46:57 -07:00

ip_conntrack_core.c

[NETFILTER] ip_conntrack: Make "hashsize" conntrack parameter writable

2005-10-26 00:19:27 -02:00

ip_conntrack_ftp.c

[NETFILTER]: Use correct type for "ports" module parameter

2005-09-13 13:48:00 -07:00

ip_conntrack_helper_pptp.c

[NETFILTER] PPTP helper: Fix compilation of conntrack helper without NAT

2005-11-04 23:02:53 -02:00

ip_conntrack_irc.c

[NETFILTER]: Use correct type for "ports" module parameter

2005-09-13 13:48:00 -07:00

ip_conntrack_netbios_ns.c

[IPV4]: Replace __in_dev_get with __in_dev_get_rcu/rtnl

2005-10-03 14:35:55 -07:00

ip_conntrack_netlink.c

[NETFILTER] nfnetlink: unconditionally require CAP_NET_ADMIN

2005-11-14 15:24:59 -08:00

ip_conntrack_proto_generic.c

Linux-2.6.12-rc2

2005-04-16 15:20:36 -07:00

ip_conntrack_proto_gre.c

[NETFILTER] ip_conntrack: Update event cache when status changes

2005-09-24 16:56:08 -07:00

ip_conntrack_proto_icmp.c

[NET]: Detect hardware rx checksum faults correctly

2005-11-10 13:01:24 -08:00

ip_conntrack_proto_sctp.c

[NETFILTER] ip_conntrack: Update event cache when status changes

2005-09-24 16:56:08 -07:00

ip_conntrack_proto_tcp.c

[NETFILTER] ctnetlink: More thorough size checking of attributes

2005-11-14 15:22:11 -08:00

ip_conntrack_proto_udp.c

[NETFILTER]: Extend netfilter logging API

2005-08-29 15:38:07 -07:00

ip_conntrack_standalone.c

[NETFILTER] Fix conntrack event cache deadlock/oops

2005-09-22 23:46:57 -07:00

ip_conntrack_tftp.c

[NETFILTER]: Use correct type for "ports" module parameter

2005-09-13 13:48:00 -07:00

ip_nat_amanda.c

[NETFILTER]: ip_conntrack_expect_related must not free expectation

2005-07-21 13:14:46 -07:00

ip_nat_core.c

[NETFILTER] NAT: Fix module refcount dropping too far

2005-11-05 01:23:34 -02:00

ip_nat_ftp.c

[NETFILTER]: ip_conntrack_expect_related must not free expectation

2005-07-21 13:14:46 -07:00

ip_nat_helper_pptp.c

[NETFILTER] PPTP helper: fix PNS-PAC expectation call id

2005-11-09 13:01:53 -08:00

ip_nat_helper.c

[NETFILTER]: Fix invalid module autoloading by splitting iptable_nat

2005-09-26 15:25:11 -07:00

ip_nat_irc.c

[NETFILTER]: ip_conntrack_expect_related must not free expectation

2005-07-21 13:14:46 -07:00

ip_nat_proto_gre.c

[NETFILTER] PPTP helper: Fix endianness bug in GRE key / CallID NAT

2005-11-04 23:19:17 -02:00

ip_nat_proto_icmp.c

[NETFILTER]: Rename skb_ip_make_writable() to skb_make_writable()

2005-08-29 15:34:40 -07:00

ip_nat_proto_tcp.c

[NETFILTER]: Rename skb_ip_make_writable() to skb_make_writable()

2005-08-29 15:34:40 -07:00

ip_nat_proto_udp.c

[NETFILTER]: Rename skb_ip_make_writable() to skb_make_writable()

2005-08-29 15:34:40 -07:00

ip_nat_proto_unknown.c

[NETFILTER] NAT: Fix module refcount dropping too far

2005-11-05 01:23:34 -02:00

ip_nat_rule.c

[NETFILTER]: Handle NAT module load race

2005-09-06 15:09:43 -07:00

ip_nat_snmp_basic.c

[NET]: kfree cleanup

2005-11-08 09:41:34 -08:00

ip_nat_standalone.c

[NETFILTER]: Fix invalid module autoloading by splitting iptable_nat

2005-09-26 15:25:11 -07:00

ip_nat_tftp.c

[NETFILTER]: ip_conntrack_expect_related must not free expectation

2005-07-21 13:14:46 -07:00

ip_queue.c

[NET]: Fix packet timestamping.

2005-10-03 13:57:23 -07:00

ip_tables.c

[NETFILTER]: Fix OOPSes on machines with discontiguous cpu numbering.

2005-10-13 14:41:23 -07:00

ipt_addrtype.c

[PATCH] Typo fix: dot after newline in printk strings

2005-10-30 17:37:20 -08:00

ipt_ah.c

Linux-2.6.12-rc2

2005-04-16 15:20:36 -07:00

ipt_CLASSIFY.c

[NETFILTER]: reduce netfilter sk_buff enlargement

2005-08-29 15:31:04 -07:00

ipt_CLUSTERIP.c

[NETFILTER]: Add nf_conntrack subsystem.

2005-11-09 16:38:16 -08:00

ipt_comment.c

Linux-2.6.12-rc2

2005-04-16 15:20:36 -07:00

ipt_connbytes.c

[NETFILTER]: Add nf_conntrack subsystem.

2005-11-09 16:38:16 -08:00

ipt_connmark.c

[NETFILTER]: Add nf_conntrack subsystem.

2005-11-09 16:38:16 -08:00

ipt_CONNMARK.c

[NETFILTER]: Add nf_conntrack subsystem.

2005-11-09 16:38:16 -08:00

ipt_conntrack.c

[NETFILTER]: Add nf_conntrack subsystem.

2005-11-09 16:38:16 -08:00

ipt_dccp.c

[NETFILTER]: New iptables DCCP protocol header match

2005-08-29 15:54:28 -07:00

ipt_dscp.c

Linux-2.6.12-rc2

2005-04-16 15:20:36 -07:00

ipt_DSCP.c

[NETFILTER]: Rename skb_ip_make_writable() to skb_make_writable()

2005-08-29 15:34:40 -07:00

ipt_ecn.c

Linux-2.6.12-rc2

2005-04-16 15:20:36 -07:00

ipt_ECN.c

[NETFILTER]: Rename skb_ip_make_writable() to skb_make_writable()

2005-08-29 15:34:40 -07:00

ipt_esp.c

Linux-2.6.12-rc2

2005-04-16 15:20:36 -07:00

ipt_hashlimit.c

[NET]: use __read_mostly on kmem_cache_t , DEFINE_SNMP_STAT pointers

2005-08-29 16:11:18 -07:00

ipt_helper.c

[NETFILTER]: Add nf_conntrack subsystem.

2005-11-09 16:38:16 -08:00

ipt_iprange.c

Linux-2.6.12-rc2

2005-04-16 15:20:36 -07:00

ipt_length.c

Linux-2.6.12-rc2

2005-04-16 15:20:36 -07:00

ipt_limit.c

Linux-2.6.12-rc2

2005-04-16 15:20:36 -07:00

ipt_LOG.c

[NETFILTER]: Extend netfilter logging API

2005-08-29 15:38:07 -07:00

ipt_mac.c

Linux-2.6.12-rc2

2005-04-16 15:20:36 -07:00

ipt_mark.c

[NETFILTER]: convert nfmark and conntrack mark to 32bit

2005-08-29 15:29:31 -07:00

ipt_MARK.c

[NETFILTER]: reduce netfilter sk_buff enlargement

2005-08-29 15:31:04 -07:00

ipt_MASQUERADE.c

[NETFILTER]: Fix DHCP + MASQUERADE problem

2005-09-13 13:49:15 -07:00

ipt_multiport.c

Linux-2.6.12-rc2

2005-04-16 15:20:36 -07:00

ipt_NETMAP.c

[NETFILTER]: Make NETMAP target usable in OUTPUT

2005-08-29 15:58:41 -07:00

ipt_NFQUEUE.c

[NETFILTER]: Add "nfnetlink_queue" netfilter queue handler over nfnetlink

2005-08-29 15:36:56 -07:00

ipt_NOTRACK.c

[NETFILTER]: Add nf_conntrack subsystem.

2005-11-09 16:38:16 -08:00

ipt_owner.c

[PATCH] files: lock-free fd look-up

2005-09-09 13:57:55 -07:00

ipt_physdev.c

Linux-2.6.12-rc2

2005-04-16 15:20:36 -07:00

ipt_pkttype.c

Linux-2.6.12-rc2

2005-04-16 15:20:36 -07:00

ipt_realm.c

Linux-2.6.12-rc2

2005-04-16 15:20:36 -07:00

ipt_recent.c

[NETFILTER]: ipt_recent: last_pkts is an array of "unsigned long" not "u_int32_t"

2005-06-15 20:51:14 -07:00

ipt_REDIRECT.c

[IPV4]: Replace __in_dev_get with __in_dev_get_rcu/rtnl

2005-10-03 14:35:55 -07:00

ipt_REJECT.c

[XFRM]: Always release dst_entry on error in xfrm_lookup

2005-09-08 15:11:55 -07:00

ipt_SAME.c

Linux-2.6.12-rc2

2005-04-16 15:20:36 -07:00

ipt_sctp.c

Linux-2.6.12-rc2

2005-04-16 15:20:36 -07:00

ipt_state.c

[NETFILTER]: Add nf_conntrack subsystem.

2005-11-09 16:38:16 -08:00

ipt_string.c

[NETFILTER]: Add string match

2005-08-29 16:04:07 -07:00

ipt_tcpmss.c

Linux-2.6.12-rc2

2005-04-16 15:20:36 -07:00

ipt_TCPMSS.c

[NETFILTER]: Rename skb_ip_make_writable() to skb_make_writable()

2005-08-29 15:34:40 -07:00

ipt_tos.c

Linux-2.6.12-rc2

2005-04-16 15:20:36 -07:00

ipt_TOS.c

[NETFILTER]: Rename skb_ip_make_writable() to skb_make_writable()

2005-08-29 15:34:40 -07:00

ipt_ttl.c

Linux-2.6.12-rc2

2005-04-16 15:20:36 -07:00

ipt_TTL.c

[NETFILTER]: Add new iptables TTL target

2005-08-29 16:13:22 -07:00

ipt_ULOG.c

[NET]: Fix packet timestamping.

2005-10-03 13:57:23 -07:00

iptable_filter.c

Linux-2.6.12-rc2

2005-04-16 15:20:36 -07:00

iptable_mangle.c

Linux-2.6.12-rc2

2005-04-16 15:20:36 -07:00

iptable_raw.c

[NETFILTER]: Missing owner-field initialization in iptable_raw

2005-05-03 14:23:13 -07:00

Kconfig

[NETFILTER]: Add nf_conntrack subsystem.

2005-11-09 16:38:16 -08:00

Makefile

[NETFILTER]: Add nf_conntrack subsystem.

2005-11-09 16:38:16 -08:00

nf_conntrack_l3proto_ipv4.c

[NETFILTER]: Add nf_conntrack subsystem.

2005-11-09 16:38:16 -08:00

nf_conntrack_proto_icmp.c

[NETFILTER]: Add nf_conntrack subsystem.

2005-11-09 16:38:16 -08:00