Skip to content

Generic netlink multicast fixes

Ido Schimmel stable 1 version New

Get series with b4
b4 am [email protected]

Versions newest first

  1. v1 Latest4 patches 0 repliesNew

Patches in v1 No applies recorded yet

#Subject and filesSizeRepliesApplied
1/4netlink: don't call ->netlink_bind with table lock heldnet/netlink/af_netlink.c+2 -20 replies
2/4genetlink: add CAP_NET_ADMIN test for multicast bindinclude/net/genetlink.h net/netlink/genetlink.c+33 -00 replies
3/4psample: Require 'CAP_NET_ADMIN' when joining "packets" groupnet/psample/psample.c+2 -10 replies
4/4drop_monitor: Require 'CAP_SYS_ADMIN' when joining "events" groupinclude/net/genetlink.h net/core/drop_monitor.c net/netlink/genetlink.c+8 -10 replies

Reviews trailers per patch

2 of 4 patches have a Reviewed-by or Acked-by.

PatchJacob KellerJiri Pirko
1/4
2/4
3/4R-b R-b
4/4R-b R-b

Trailers given in replies are filled; those carried in the patches from earlier versions are outlined with dashes.

Read the v1 thread

Cover letter [PATCH 5.10 0/4] Generic netlink multicast fixes

Restrict two generic netlink multicast groups - in the "psample" and "NET_DM" families - to be root-only with the appropriate capabilities.

Patch #1 is a dependency of patch #2 which is needed by the actual fixes in patches #3 and #4.

Florian Westphal (1):
netlink: don't call ->netlink_bind with table lock held

Ido Schimmel (3):
genetlink: add CAP_NET_ADMIN test for multicast bind
psample: Require 'CAP_NET_ADMIN' when joining "packets" group
drop_monitor: Require 'CAP_SYS_ADMIN' when joining "events" group

 include/net/genetlink.h  |  3 +++
 net/core/drop_monitor.c  |  4 +++-
 net/netlink/af_netlink.c |  4 ++--
 net/netlink/genetlink.c  | 35 +++++++++++++++++++++++++++++++++++
 net/psample/psample.c    |  3 ++-
 5 files changed, 45 insertions(+), 4 deletions(-)
Signature · 1 line
2.40.1