Skip to contentSkip to conversation

ipv6: export ip6 fragments sysctl to unprivileged users

PATCH Applied Eric Dumazet 2 participants 2 messages Mar 28, 2018 – Mar 29, 2018

Subsystems (3)
Networking Network drivers IPv4/IPv6
lore
Share & tools
lore

Eric Dumazet

author
#0 lore raw

PATCH 1/1 ipv6: export ip6 fragments sysctl to unprivileged users

IPv4 was changed in commit 52a773d645e9 ("net: Export ip fragment sysctl to unprivileged users")

The only sysctl that is not per-netns is not used :
ip6frag_secret_interval

Signed-off-by Eric Dumazet <[email protected]>
Cc Nikolay Borisov <[email protected]>
---
 net/ipv6/reassembly.c | 4 ----
 1 file changed, 4 deletions(-)
net/ipv6/reassembly.c +0 -4
index afbc000ad4f2912acd475246e2ff2368c1bbeacb..08a139f14d0f6fa8ca326088cce1144411e09bf5 100644
@@ -650,10 +650,6 @@ static int __net_init ip6_frags_ns_sysctl_register(struct net *net)
 		table[1].data = &net->ipv6.frags.low_thresh;
 		table[1].extra2 = &net->ipv6.frags.high_thresh;
 		table[2].data = &net->ipv6.frags.timeout;
-
-		/* Don't export sysctls to unprivileged users */
-		if (net->user_ns != &init_user_ns)
-			table[0].procname = NULL;
 	}
 
 	hdr = register_net_sysctl(net, "net/ipv6", table);
Signature · 1 line
2.17.0.rc1.321.gba9d0f2565-goog
maintainer Applied
#1 lore raw

From: Eric Dumazet <[email protected]>
Date: Tue, 27 Mar 2018 19:49:42 -0700

Quoted 7 lines

IPv4 was changed in commit 52a773d645e9 ("net: Export ip fragment sysctl to unprivileged users")

The only sysctl that is not per-netns is not used :
ip6frag_secret_interval

Signed-off-by Eric Dumazet <[email protected]>

Applied.