netdev.vger.kernel.org archive mirror
 help / color / mirror / Atom feed
* [PATCH 0/2] net_sched: Remove broken tc actions
@ 2013-10-27 13:40 Eric W. Biederman
  2013-10-27 13:42 ` [PATCH 1/2] net_sched: Remove broken act_skbedit Eric W. Biederman
                   ` (2 more replies)
  0 siblings, 3 replies; 6+ messages in thread
From: Eric W. Biederman @ 2013-10-27 13:40 UTC (permalink / raw)
  To: David Miller; +Cc: netdev, alexander.h.duyck, jhs


While auditing the code to make certain it would be safe to enable the
user namespace root to use tc actions I stumbled on the strange fact
that two of the tc modules in the kernel have been broken for more
years than I care to think about.

In particular neither of these two modules implements the tc_action_ops
lookup method.  Which means that in practice neither RTM_GETACTION nor
RTM_DELACTION work.  And with RTM_DELACTION broken that looks like a
permanent leak of kernel memory to me.

A leak I am not happy at root having and certainly not something I want
to allow unprivileged users access to.

On the premise that 5+ years is too long to wait for someone to notice,
complain and get this code fixed let's just remove these broken tc
modules.

Eric W. Biederman (2):
      net_sched: Remove broken act_skbedit
      net_sched: Remove broken act_simple

 include/net/tc_act/tc_defact.h         |   14 --
 include/net/tc_act/tc_skbedit.h        |   36 -----
 include/uapi/linux/tc_act/Kbuild       |    2 -
 include/uapi/linux/tc_act/tc_defact.h  |   19 ---
 include/uapi/linux/tc_act/tc_skbedit.h |   46 -------
 net/sched/Kconfig                      |   25 ----
 net/sched/Makefile                     |    2 -
 net/sched/act_simple.c                 |  225 --------------------------------
 net/sched/act_skbedit.c                |  224 -------------------------------
 9 files changed, 0 insertions(+), 593 deletions(-)

^ permalink raw reply	[flat|nested] 6+ messages in thread

end of thread, other threads:[~2013-10-28 22:57 UTC | newest]

Thread overview: 6+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2013-10-27 13:40 [PATCH 0/2] net_sched: Remove broken tc actions Eric W. Biederman
2013-10-27 13:42 ` [PATCH 1/2] net_sched: Remove broken act_skbedit Eric W. Biederman
2013-10-27 13:43 ` [PATCH 2/2] net_sched: Remove broken act_simple Eric W. Biederman
2013-10-27 16:58 ` [PATCH 0/2] net_sched: Remove broken tc actions Jamal Hadi Salim
2013-10-27 20:37   ` Alexander Duyck
2013-10-28 22:57     ` Jamal Hadi Salim

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).