You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

Eric Dumazet e0e3cea46d af_netlink: force credentials passing [CVE-2012-3520] ... Pablo Neira Ayuso discovered that avahi and potentially NetworkManager accept spoofed Netlink messages because of a kernel bug. The kernel passes all-zero SCM_CREDENTIALS ancillary data to the receiver if the sender did not provide such data, instead of not including any such data at all or including the correct data from the peer (as it is the case with AF_UNIX). This bug was introduced in commit 16e5726269 (af_unix: dont send SCM_CREDENTIALS by default) This patch forces passing credentials for netlink, as before the regression. Another fix would be to not add SCM_CREDENTIALS in netlink messages if not provided by the sender, but it might break some programs. With help from Florian Weimer & Petr Matousek This issue is designated as CVE-2012-3520 Signed-off-by: Eric Dumazet <edumazet@google.com> Cc: Petr Matousek <pmatouse@redhat.com> Cc: Florian Weimer <fweimer@redhat.com> Cc: Pablo Neira Ayuso <pablo@netfilter.org> Signed-off-by: David S. Miller <davem@davemloft.net>		13 years ago
..
Kconfig	net: Default UDP and UNIX diag to 'n'.	13 years ago
Makefile	unix_diag: Write it into kbuild	13 years ago
af_unix.c	af_netlink: force credentials passing [CVE-2012-3520]	13 years ago
diag.c	net: make sock diag per-namespace	13 years ago
garbage.c	…
sysctl_net_unix.c	net: Convert all sysctl registrations to register_net_sysctl	13 years ago