Andrew Lutomirski 265bcb0ea1 net: Fix ns_capable check in sock_diag_put_filterinfo ... [ Upstream commit 78541c1dc6 ] The caller needs capabilities on the namespace being queried, not on their own namespace. This is a security bug, although it likely has only a minor impact. Cc: stable@vger.kernel.org Signed-off-by: Andy Lutomirski <luto@amacapital.net> Acked-by: Nicolas Dichtel <nicolas.dichtel@6wind.com> Signed-off-by: David S. Miller <davem@davemloft.net> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>		2014-05-31 13:20:34 -07:00
..
Kconfig	packet: Diag core and basic socket info dumping	2012-08-14 16:56:33 -07:00
Makefile	packet: Diag core and basic socket info dumping	2012-08-14 16:56:33 -07:00
af_packet.c	af_packet: remove a stray tab in packet_set_ring()	2014-02-18 18:02:25 -05:00
diag.c	net: Fix ns_capable check in sock_diag_put_filterinfo	2014-05-31 13:20:34 -07:00
internal.h	packet: use percpu mmap tx frame pending refcount	2014-01-16 16:17:12 -08:00