You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

Eric W. Biederman 90f62cf30a net: Use netlink_ns_capable to verify the permisions of netlink messages ... It is possible by passing a netlink socket to a more privileged executable and then to fool that executable into writing to the socket data that happens to be valid netlink message to do something that privileged executable did not intend to do. To keep this from happening replace bare capable and ns_capable calls with netlink_capable, netlink_net_calls and netlink_ns_capable calls. Which act the same as the previous calls except they verify that the opener of the socket had the desired permissions as well. Reported-by: Andy Lutomirski <luto@amacapital.net> Signed-off-by: "Eric W. Biederman" <ebiederm@xmission.com> Signed-off-by: David S. Miller <davem@davemloft.net>		11 years ago
..
Kconfig	net/xfrm: remove depends on CONFIG_EXPERIMENTAL	12 years ago
Makefile	xfrm: make xfrm_algo.c a module	13 years ago
xfrm_algo.c	net: move pskb_put() to core code	11 years ago
xfrm_hash.c	…
xfrm_hash.h	net: misc: Remove extern from function prototypes	11 years ago
xfrm_input.c	xfrm: Introduce xfrm_input_afinfo to access the the callbacks properly	11 years ago
xfrm_ipcomp.c	Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net	11 years ago
xfrm_output.c	xfrm: choose protocol family by skb protocol	12 years ago
xfrm_policy.c	ipv4: add a sock pointer to dst->output() path.	11 years ago
xfrm_proc.c	xfrm: checkpatch errors with space	11 years ago
xfrm_replay.c	xfrm: Fix aevent generation for each received packet	12 years ago
xfrm_state.c	Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/klassert/ipsec-next	11 years ago
xfrm_sysctl.c	net: Don't export sysctls to unprivileged users	12 years ago
xfrm_user.c	net: Use netlink_ns_capable to verify the permisions of netlink messages	11 years ago