]> git.baikalelectronics.ru Git - kernel.git/commit
projects / kernel.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: d993a91) | patch
[LLC]: Restrict LLC sockets to root
authorPatrick McHardy <kaber@trash.net>
Fri, 28 Mar 2008 03:28:10 +0000 (20:28 -0700)
committerDavid S. Miller <davem@davemloft.net>
Fri, 28 Mar 2008 03:28:10 +0000 (20:28 -0700)
commitcf5140fab74b4011352aca34bee5a286a3515602
tree14a355d650dc467e105fe00bc62a3599e890bc50tree | snapshot
parentd993a91741e5922b11f786831ed8226b57bc3939commit | diff
[LLC]: Restrict LLC sockets to root

LLC currently allows users to inject raw frames, including IP packets
encapsulated in SNAP. While Linux doesn't handle IP over SNAP, other
systems do. Restrict LLC sockets to root similar to packet sockets.

[ Modified Patrick's patch to use CAP_NEW_RAW --DaveM ]

Signed-off-by: Patrick McHardy <kaber@trash.net>
Signed-off-by: David S. Miller <davem@davemloft.net>
net/llc/af_llc.c diff | blob | history
Linux Kernel Source Tree.