]> git.openfabrics.org - ~emulex/infiniband.git/commit
projects / ~emulex / infiniband.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: b0bda38) | patch
net: Fix ns_capable check in sock_diag_put_filterinfo
authorAndrew Lutomirski <luto@amacapital.net>
Thu, 17 Apr 2014 04:41:34 +0000 (21:41 -0700)
committerDavid S. Miller <davem@davemloft.net>
Tue, 22 Apr 2014 16:49:39 +0000 (12:49 -0400)
commit78541c1dc60b65ecfce5a6a096fc260219d6784e
tree45afae9a1e20fbd72426404b1d110aef9cfd6104tree | snapshot
parentb0bda3853266121363a5ad8c786fa82d233538c1commit | diff
net: Fix ns_capable check in sock_diag_put_filterinfo

The caller needs capabilities on the namespace being queried, not on
their own namespace.  This is a security bug, although it likely has
only a minor impact.

Cc: stable@vger.kernel.org
Signed-off-by: Andy Lutomirski <luto@amacapital.net>
Acked-by: Nicolas Dichtel <nicolas.dichtel@6wind.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
include/linux/sock_diag.h diff | blob | history
net/core/sock_diag.c diff | blob | history
net/packet/diag.c diff | blob | history
Emulex OneConnect RDMA Driver