net/nfc/rawsock.c: add CAP_NET_RAW check.
When creating a raw AF_NFC socket, CAP_NET_RAW needs to be checked first. Signed-off-by: Qingyu Li <ieatmuttonchuan@gmail.com> Signed-off-by: David S. Miller <davem@davemloft.net>
This commit is contained in:
parent
1dab5877e8
commit
26896f0146
|
@ -328,10 +328,13 @@ static int rawsock_create(struct net *net, struct socket *sock,
|
||||||
if ((sock->type != SOCK_SEQPACKET) && (sock->type != SOCK_RAW))
|
if ((sock->type != SOCK_SEQPACKET) && (sock->type != SOCK_RAW))
|
||||||
return -ESOCKTNOSUPPORT;
|
return -ESOCKTNOSUPPORT;
|
||||||
|
|
||||||
if (sock->type == SOCK_RAW)
|
if (sock->type == SOCK_RAW) {
|
||||||
|
if (!capable(CAP_NET_RAW))
|
||||||
|
return -EPERM;
|
||||||
sock->ops = &rawsock_raw_ops;
|
sock->ops = &rawsock_raw_ops;
|
||||||
else
|
} else {
|
||||||
sock->ops = &rawsock_ops;
|
sock->ops = &rawsock_ops;
|
||||||
|
}
|
||||||
|
|
||||||
sk = sk_alloc(net, PF_NFC, GFP_ATOMIC, nfc_proto->proto, kern);
|
sk = sk_alloc(net, PF_NFC, GFP_ATOMIC, nfc_proto->proto, kern);
|
||||||
if (!sk)
|
if (!sk)
|
||||||
|
|
Loading…
Reference in New Issue