iv/linux
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
linux/net
History
Eric W. Biederman fdab6a4cbd netfilter: nftables: Do not run chains in the wrong network namespace 
Currenlty nf_tables chains added in one network namespace are being
run in all network namespace.  The issues are myriad with the simplest
being an unprivileged user can cause any network packets to be dropped.

Address this by simply not running nf_tables chains in the wrong
network namespace.

Cc: stable@vger.kernel.org
Signed-off-by: "Eric W. Biederman" <ebiederm@xmission.com>
Acked-by: Pablo Neira Ayuso <pablo@netfilter.org>
Signed-off-by: David S. Miller <davem@davemloft.net>
2015-06-23 06:23:22 -07:00
..
6lowpan
6lowpan: nhc: add other known rfc6282 compressions
2015-02-14 23:08:44 +01:00
9p
9p: patches for 4.1 merge window
2015-04-18 17:45:30 -04:00
802
net: Kill dev_rebuild_header
2015-03-02 16:43:41 -05:00
8021q
vlan: Add GRO support for non hardware accelerated vlan
2015-06-01 16:50:52 -07:00
appletalk
net: Pass kern from net_proto_family.create to sk_alloc
2015-05-11 10:50:17 -04:00
atm
net: Pass kern from net_proto_family.create to sk_alloc
2015-05-11 10:50:17 -04:00
ax25
netfilter: Remove spurios included of netfilter.h
2015-06-18 21:14:32 +02:00
batman-adv
batman-adv: change the MAC of each VLAN upon ndo_set_mac_address
2015-06-07 17:07:20 +02:00
bluetooth
Bluetooth: Fix warning of potentially uninitialized adv_instance variable
2015-06-18 21:05:31 +03:00
bridge
bridge: multicast: start querier timer when running user-space stp
2015-06-23 03:29:54 -07:00
caif
Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net
2015-06-01 22:51:30 -07:00
can
can: cangw: introduce optional uid to reference created routing jobs
2015-06-09 09:39:49 +02:00
ceph
Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net
2015-06-01 22:51:30 -07:00
core
bpf: disallow bpf tc programs access current->pid,uid
2015-06-15 20:51:20 -07:00
dcb
net/dcb: Add IEEE QCN attribute
2015-03-06 21:50:02 -05:00
dccp
sock_diag: specify info_size per inet protocol
2015-06-15 19:49:22 -07:00
decnet
net: Pass kern from net_proto_family.create to sk_alloc
2015-05-11 10:50:17 -04:00
dns_resolver
…
dsa
Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net
2015-06-01 22:51:30 -07:00
ethernet
net: Add full IPv6 addresses to flow_keys
2015-06-04 15:44:30 -07:00
hsr
net/hsr: Fix NULL pointer dereference and refcnt bugs when deleting a HSR interface.
2015-03-01 13:40:23 -05:00
ieee802154
nl802154: export supported commands
2015-06-04 12:27:15 +02:00
ipv4
inet_diag: Remove _bh suffix in inet_diag_dump_reqs().
2015-06-23 01:19:52 -07:00
ipv6
netfilter: don't pull include/linux/netfilter.h from netns headers
2015-06-18 21:14:31 +02:00
ipx
net: Pass kern from net_proto_family.create to sk_alloc
2015-05-11 10:50:17 -04:00
irda
irda: use msecs_to_jiffies for conversion to jiffies
2015-05-25 17:46:21 -04:00
iucv
net: Pass kern from net_proto_family.create to sk_alloc
2015-05-11 10:50:17 -04:00
key
net: Pass kern from net_proto_family.create to sk_alloc
2015-05-11 10:50:17 -04:00
l2tp
net: Modify sk_alloc to not reference count the netns of kernel sockets.
2015-05-11 10:50:18 -04:00
lapb
…
llc
net: Pass kern from net_proto_family.create to sk_alloc
2015-05-11 10:50:17 -04:00
mac80211
mac80211: convert HW flags to unsigned long bitmap
2015-06-10 16:05:36 +02:00
mac802154
mac802154: iface: cleanup stack variable
2015-06-17 16:00:40 +02:00
mpls
Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net
2015-06-13 23:56:52 -07:00
netfilter
netfilter: nftables: Do not run chains in the wrong network namespace
2015-06-23 06:23:22 -07:00
netlabel
netlink: implement nla_put_in_addr and nla_put_in6_addr
2015-03-31 13:58:35 -04:00
netlink
netlink: add API to retrieve all group memberships
2015-06-21 10:18:18 -07:00
netrom
netfilter: Remove spurios included of netfilter.h
2015-06-18 21:14:32 +02:00
nfc
NFC: nci: fix mistake in uart generic driver
2015-06-15 18:10:37 +02:00
openvswitch
Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net
2015-06-08 20:06:56 -07:00
packet
packet: free packet_rollover after synchronize_net
2015-06-21 09:30:42 -07:00
phonet
net: Pass kern from net_proto_family.create to sk_alloc
2015-05-11 10:50:17 -04:00
rds
net: rds: use for_each_sg() for scatterlist parsing
2015-06-21 09:32:08 -07:00
rfkill
net: rfkill: gpio: make better use of gpiod API
2015-05-29 13:13:45 +02:00
rose
netfilter: Remove spurios included of netfilter.h
2015-06-18 21:14:32 +02:00
rxrpc
net: Pass kern from net_proto_family.create to sk_alloc
2015-05-11 10:50:17 -04:00
sched
pkt_sched: sch_qfq: remove redundant -if- control statement
2015-06-21 09:47:24 -07:00
sctp
Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net
2015-06-13 23:56:52 -07:00
sunrpc
svcrpc: fix potential GSSX_ACCEPT_SEC_CONTEXT decoding failures
2015-05-04 12:02:40 -04:00
switchdev
switchdev: fdb filter_dev is always NULL for self (device), so remove check
2015-06-23 00:58:27 -07:00
tipc
Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net
2015-06-13 23:56:52 -07:00
unix
net/unix: support SCM_SECURITY for stream sockets
2015-06-10 22:49:20 -07:00
vmw_vsock
net: Pass kern from net_proto_family.create to sk_alloc
2015-05-11 10:50:17 -04:00
wimax
…
wireless
Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net
2015-06-13 23:56:52 -07:00
x25
net: Pass kern from net_proto_family.create to sk_alloc
2015-05-11 10:50:17 -04:00
xfrm
Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net
2015-06-01 22:51:30 -07:00
compat.c
net: switch importing msghdr from userland to {compat_,}import_iovec()
2015-04-09 00:02:26 -04:00
Kconfig
net: add CONFIG_NET_INGRESS to enable ingress filtering
2015-05-14 01:10:05 -04:00
Makefile
mpls: Refactor how the mpls module is built
2015-03-04 00:26:06 -05:00
socket.c
net: Add a struct net parameter to sock_create_kern
2015-05-11 10:50:17 -04:00
sysctl_net.c
…