diff options
| author |   Pablo Neira Ayuso <pablo@netfilter.org> | 2020-09-03 19:00:52 +0200 |
|---|---|---|
| committer | Pablo Neira Ayuso <pablo@netfilter.org> | 2020-09-08 13:04:56 +0200 |
| commit | 0c92411bb81de9bc516d6924f50289d8d5f880e5 (patch) | |
| tree | ca5410727d171c9bdb37ea113fb04f83882fb1a9 /net/netfilter/nft_meta.c | |
| parent | netfilter: conntrack: nf_conncount_init is failing with IPv6 disabled (diff) | |
| download | linux-dev-0c92411bb81de9bc516d6924f50289d8d5f880e5.tar.xz linux-dev-0c92411bb81de9bc516d6924f50289d8d5f880e5.zip | |
netfilter: nft_meta: use socket user_ns to retrieve skuid and skgid
... instead of using init_user_ns.
Fixes: 96518518cc41 ("netfilter: add nftables")
Tested-by: Phil Sutter <phil@nwl.cc>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Diffstat (limited to 'net/netfilter/nft_meta.c')
| -rw-r--r-- | net/netfilter/nft_meta.c | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/net/netfilter/nft_meta.c b/net/netfilter/nft_meta.c index 7bc6537f3ccb..b37bd02448d8 100644 --- a/net/netfilter/nft_meta.c +++ b/net/netfilter/nft_meta.c @@ -147,11 +147,11 @@ nft_meta_get_eval_skugid(enum nft_meta_keys key, switch (key) { case NFT_META_SKUID: - *dest = from_kuid_munged(&init_user_ns, + *dest = from_kuid_munged(sock_net(sk)->user_ns, sock->file->f_cred->fsuid); break; case NFT_META_SKGID: - *dest = from_kgid_munged(&init_user_ns, + *dest = from_kgid_munged(sock_net(sk)->user_ns, sock->file->f_cred->fsgid); break; default: |