Maciej Żenczykowski 6cc7a765c2 net: allow CAP_NET_RAW to set socket options IP{,V6}_TRANSPARENT ... Up till now the IP{,V6}_TRANSPARENT socket options (which actually set the same bit in the socket struct) have required CAP_NET_ADMIN privileges to set or clear the option. - we make clearing the bit not require any privileges. - we allow CAP_NET_ADMIN to set the bit (as before this change) - we allow CAP_NET_RAW to set this bit, because raw sockets already pretty much effectively allow you to emulate socket transparency. Signed-off-by: Maciej Żenczykowski <maze@google.com> Signed-off-by: David S. Miller <davem@davemloft.net>		2011-10-20 18:21:36 -04:00
..
netfilter	Merge branch 'master' of github.com:davem330/net	2011-09-22 03:23:13 -04:00
af_inet.c	ipv4: compat_ioctl is local to af_inet.c, make it static	2011-10-19 19:24:39 -04:00
ah4.c
arp.c	neigh: Pass neighbour entry to output ops.	2011-07-17 23:11:17 -07:00
cipso_ipv4.c	cipso: remove an unneeded NULL check in cipso_v4_doi_add()	2011-10-11 18:43:53 -04:00
datagram.c
devinet.c	rcu: convert uses of rcu_assign_pointer(x, NULL) to RCU_INIT_POINTER	2011-08-02 04:29:23 -07:00
esp4.c
fib_frontend.c	rtnetlink: Compute and store minimum ifinfo dump size	2011-06-09 20:38:07 -07:00
fib_lookup.h
fib_rules.c
fib_semantics.c	ipv4: Fix fib_info->fib_metrics leak	2011-09-16 17:42:26 -04:00
fib_trie.c	rcu: convert uses of rcu_assign_pointer(x, NULL) to RCU_INIT_POINTER	2011-08-02 04:29:23 -07:00
gre.c	rcu: convert uses of rcu_assign_pointer(x, NULL) to RCU_INIT_POINTER	2011-08-02 04:29:23 -07:00
icmp.c	net: more accurate skb truesize	2011-10-13 16:05:07 -04:00
igmp.c	Merge branch 'master' of github.com:davem330/net	2011-09-22 03:23:13 -04:00
inet_connection_sock.c	seqlock: Get rid of SEQLOCK_UNLOCKED	2011-05-24 15:22:17 +02:00
inet_diag.c	net-netlink: Add a new attribute to expose TOS values via netlink	2011-10-12 19:09:18 -04:00
inet_fragment.c
inet_hashtables.c	net: Compute protocol sequence numbers and fragment IDs using MD5.	2011-08-06 18:33:19 -07:00
inet_lro.c	net: add skb frag size accessors	2011-10-19 03:10:46 -04:00
inet_timewait_sock.c
inetpeer.c	net: Compute protocol sequence numbers and fragment IDs using MD5.	2011-08-06 18:33:19 -07:00
ip_forward.c
ip_fragment.c	net: add skb frag size accessors	2011-10-19 03:10:46 -04:00
ip_gre.c	net: Abstract dst->neighbour accesses behind helpers.	2011-07-17 23:11:35 -07:00
ip_input.c	ip: introduce ip_is_fragment helper inline function	2011-06-21 20:33:34 -07:00
ip_options.c	ip_options_compile: properly handle unaligned pointer	2011-05-31 15:11:02 -07:00
ip_output.c	net: add skb frag size accessors	2011-10-19 03:10:46 -04:00
ip_sockglue.c	net: allow CAP_NET_RAW to set socket options IP{,V6}_TRANSPARENT	2011-10-20 18:21:36 -04:00
ipcomp.c
ipconfig.c	ipconfig: Reduce switch/case indent	2011-07-01 16:11:15 -07:00
ipip.c	rcu: convert uses of rcu_assign_pointer(x, NULL) to RCU_INIT_POINTER	2011-08-02 04:29:23 -07:00
ipmr.c	net: cleanup some rcu_dereference_raw	2011-08-12 02:55:28 -07:00
Kconfig
Makefile	net: ipv4: add IPPROTO_ICMP socket kind	2011-05-13 16:08:13 -04:00
netfilter.c	netfilter: TCP and raw fix for ip_route_me_harder	2011-08-07 22:52:32 -07:00
ping.c	ipv4, ping: Remove duplicate icmp.h include	2011-06-20 13:04:38 -07:00
proc.c	tcp: Change possible SYN flooding messages	2011-09-15 14:49:43 -04:00
protocol.c
raw.c	ipv4: route non-local sources for raw socket	2011-08-07 22:52:32 -07:00
route.c	ipv4: NET_IPV4_ROUTE_GC_INTERVAL removal	2011-10-03 14:13:01 -04:00
syncookies.c	tcp: initialize variable ecn_ok in syncookies path	2011-08-10 21:59:57 -07:00
sysctl_net_ipv4.c	inetpeer: remove unused list	2011-06-08 17:05:30 -07:00
tcp_bic.c
tcp_cong.c
tcp_cubic.c
tcp_diag.c
tcp_highspeed.c
tcp_htcp.c
tcp_hybla.c
tcp_illinois.c
tcp_input.c	tcp: remove unused tcp_fin() parameters	2011-10-20 17:44:03 -04:00
tcp_ipv4.c	Merge branch 'master' of github.com:davem330/net	2011-10-07 13:38:43 -04:00
tcp_lp.c
tcp_minisocks.c	tcp: RFC2988bis + taking RTT sample from 3WHS for the passive open side	2011-06-08 17:05:30 -07:00
tcp_output.c	net: add skb frag size accessors	2011-10-19 03:10:46 -04:00
tcp_probe.c
tcp_scalable.c
tcp_timer.c
tcp_vegas.c
tcp_vegas.h
tcp_veno.c
tcp_westwood.c
tcp_yeah.c
tcp.c	net: add skb frag size accessors	2011-10-19 03:10:46 -04:00
tunnel4.c
udp_impl.h
udp.c	rps: Add flag to skb to indicate rxhash is based on L4 tuple	2011-08-17 20:06:03 -07:00
udplite.c
xfrm4_input.c
xfrm4_mode_beet.c
xfrm4_mode_transport.c
xfrm4_mode_tunnel.c
xfrm4_output.c	xfrm4: Don't call icmp_send on local error	2011-07-01 17:33:19 -07:00
xfrm4_policy.c	ip: introduce ip_is_fragment helper inline function	2011-06-21 20:33:34 -07:00
xfrm4_state.c
xfrm4_tunnel.c