From mboxrd@z Thu Jan 1 00:00:00 1970 From: Nicolas Dichtel Subject: Re: [PATCH] net: Fix ns_capable check in sock_diag_put_filterinfo Date: Thu, 17 Apr 2014 11:22:06 +0200 Message-ID: <534F9D3E.9050300@6wind.com> References: <1360f6acc2064d49a41f2d993d05cdcf8a40fc06.1397709384.git.luto@amacapital.net> <1397712086.19600.2.camel@edumazet-glaptop2.roam.corp.google.com> Reply-To: nicolas.dichtel@6wind.com Mime-Version: 1.0 Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: QUOTED-PRINTABLE Cc: "Eric W. Biederman" , netdev@vger.kernel.org, stable@vger.kernel.org To: Eric Dumazet , Andy Lutomirski Return-path: Received: from mail-wi0-f175.google.com ([209.85.212.175]:42389 "EHLO mail-wi0-f175.google.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1752941AbaDQJWJ (ORCPT ); Thu, 17 Apr 2014 05:22:09 -0400 Received: by mail-wi0-f175.google.com with SMTP id cc10so2621614wib.2 for ; Thu, 17 Apr 2014 02:22:08 -0700 (PDT) In-Reply-To: <1397712086.19600.2.camel@edumazet-glaptop2.roam.corp.google.com> Sender: netdev-owner@vger.kernel.org List-ID: Le 17/04/2014 07:21, Eric Dumazet a =C3=A9crit : > On Wed, 2014-04-16 at 21:41 -0700, Andy Lutomirski wrote: >> The caller needs capabilities on the namespace being queried, not on >> their own namespace. This is a security bug, although it likely has >> only a minor impact. >> >> Cc: stable@vger.kernel.org >> Signed-off-by: Andy Lutomirski Acked-by: Nicolas Dichtel