aboutsummaryrefslogtreecommitdiffstatshomepage
path: root/src/tests/qemu/init.c
diff options
context:
space:
mode:
authorJason A. Donenfeld <Jason@zx2c4.com>2018-12-28 16:51:34 +0100
committerJason A. Donenfeld <Jason@zx2c4.com>2018-12-30 15:59:30 +0100
commit59da0810523e5e0d47e978b984e13a3e5a050a62 (patch)
tree4f7ad3b9ac9113629926639f232fe36b08f0dcaf /src/tests/qemu/init.c
parenttools: curve25519: handle unaligned loads/stores safely (diff)
downloadwireguard-monolithic-historical-59da0810523e5e0d47e978b984e13a3e5a050a62.tar.xz
wireguard-monolithic-historical-59da0810523e5e0d47e978b984e13a3e5a050a62.zip
netlink: auth socket changes against namespace of socket
In WireGuard, the underlying UDP socket lives in the namespace where the interface was created and doesn't move if the interface is moved. This allows one to create the interface in some privileged place that has Internet access, and then move it into a container namespace that only has the WireGuard interface for egress. Consider the following situation: 1. Interface created in namespace A. Socket therefore lives in namespace A. 2. Interface moved to namespace B. Socket remains in namespace A. 3. Namespace B now has access to the interface and changes the listen port and/or fwmark of socket. Change is reflected in namespace A. This behavior is arguably _fine_ and perhaps even expected or acceptable. But there's also an argument to be made that B should have A's cred to do so. So, this patch adds a simple ns_capable check.
Diffstat (limited to 'src/tests/qemu/init.c')
0 files changed, 0 insertions, 0 deletions