Re: libnetfilter_conntrack checks for (getuid() == 0)

[Sebastian Hagen <sebastian_hagen@memespace.net>]

[-- Attachment #1: Type: text/plain, Size: 96 bytes --]

Patrick McHardy wrote:
> Please send a patch.
Done, and attached to this mail.

Sebastian Hagen

[-- Attachment #2: libnetfilter_conntrack_getuid.patch --]
[-- Type: text/x-patch, Size: 784 bytes --]

--- libnetfilter_conntrack/src/libnetfilter_conntrack.c	2006-05-24 19:39:29.000000000 +0200
+++ libnetfilter_conntrack_patched/src/libnetfilter_conntrack.c	2006-08-15 19:41:25.000000000 +0200
@@ -1125,12 +1125,6 @@
 
 int nfct_event_conntrack(struct nfct_handle *cth)
 {
-	/*
-	 * You need to be root to listen to conntrack events
-	 */
-	if (getuid() != 0)
-		return -EPERM;
-	
 	cth->handler = nfct_conntrack_netlink_handler;
 	return nfnl_listen(cth->nfnlh, &callback_handler, cth);
 }
@@ -1298,12 +1292,6 @@
 
 int nfct_event_expectation(struct nfct_handle *cth)
 {
-	/*
-	 * You need to be root to listen to conntrack events
-	 */
-	if (getuid() != 0)
-		return -EPERM;
-
 	cth->handler = nfct_expect_netlink_handler;
 	return nfnl_listen(cth->nfnlh, &callback_handler, cth);
 }