diff options
| author |   Thomas Haller <thaller@redhat.com> | 2022-09-06 22:55:42 +0200 |
|---|---|---|
| committer |   Paolo Abeni <pabeni@redhat.com> | 2022-09-15 12:01:02 +0200 |
| commit | d156971854045120e1eab74b9e9ec2ac516ba91f (patch) | |
| tree | e4124daab35e274b1193ab185434ee31722039b9 /drivers/net/dsa/microchip/ksz_common.c | |
| parent | mptcp: add do_check_data_fin to replace copied (diff) | |
| download | linux-dev-d156971854045120e1eab74b9e9ec2ac516ba91f.tar.xz linux-dev-d156971854045120e1eab74b9e9ec2ac516ba91f.zip | |
mptcp: allow privileged operations from user namespaces
GENL_ADMIN_PERM checks that the user has CAP_NET_ADMIN in the initial
namespace by calling netlink_capable(). Instead, use GENL_UNS_ADMIN_PERM
which uses netlink_ns_capable(). This checks that the caller has
CAP_NET_ADMIN in the current user namespace.
See also
commit 4a92602aa1cd ("openvswitch: allow management from inside user namespaces")
which introduced this mechanism. See also
commit 5617c6cd6f84 ("nl80211: Allow privileged operations from user namespaces")
which introduced this for nl80211.
Signed-off-by: Thomas Haller <thaller@redhat.com>
Reviewed-by: Mat Martineau <mathew.j.martineau@linux.intel.com>
Signed-off-by: Matthieu Baerts <matthieu.baerts@tessares.net>
Signed-off-by: Paolo Abeni <pabeni@redhat.com>
Diffstat (limited to 'drivers/net/dsa/microchip/ksz_common.c')
0 files changed, 0 insertions, 0 deletions