]> git.baikalelectronics.ru Git - kernel.git/commit
security: remove the security_netlink_recv hook as it is equivalent to capable()
authorEric Paris <eparis@redhat.com>
Tue, 3 Jan 2012 17:25:16 +0000 (12:25 -0500)
committerEric Paris <eparis@redhat.com>
Thu, 5 Jan 2012 23:53:01 +0000 (18:53 -0500)
commit4ab92bde697cc63240fd0d5d607d32486f7e0945
tree32a5849c1879413fce0307af304e372eaa8225b4
parent00a5e4c052888ad10a78a602a15339d35c863ce0
security: remove the security_netlink_recv hook as it is equivalent to capable()

Once upon a time netlink was not sync and we had to get the effective
capabilities from the skb that was being received.  Today we instead get
the capabilities from the current task.  This has rendered the entire
purpose of the hook moot as it is now functionally equivalent to the
capable() call.

Signed-off-by: Eric Paris <eparis@redhat.com>
14 files changed:
drivers/scsi/scsi_netlink.c
include/linux/security.h
kernel/audit.c
net/core/rtnetlink.c
net/decnet/netfilter/dn_rtmsg.c
net/ipv4/netfilter/ip_queue.c
net/ipv6/netfilter/ip6_queue.c
net/netfilter/nfnetlink.c
net/netlink/genetlink.c
net/xfrm/xfrm_user.c
security/capability.c
security/commoncap.c
security/security.c
security/selinux/hooks.c