]> git.baikalelectronics.ru Git - kernel.git/commit
netfilter: xt_owner: Add supplementary groups option
authorLukasz Pawelczyk <l.pawelczyk@samsung.com>
Fri, 10 May 2019 11:46:22 +0000 (13:46 +0200)
committerPablo Neira Ayuso <pablo@netfilter.org>
Fri, 31 May 2019 16:02:41 +0000 (18:02 +0200)
commitea6cc2fd8a2b89ab6dcd096ba6dbc1ecbdf26564
tree5cc3928e493b7af80fdb71a114c55301630e44dd
parent508f744c0de38f517a94cc2d0bf8e118271b9645
netfilter: xt_owner: Add supplementary groups option

The XT_OWNER_SUPPL_GROUPS flag causes GIDs specified with XT_OWNER_GID
to be also checked in the supplementary groups of a process.

f_cred->group_info cannot be modified during its lifetime and f_cred
holds a reference to it so it's safe to use.

Signed-off-by: Lukasz Pawelczyk <l.pawelczyk@samsung.com>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
include/uapi/linux/netfilter/xt_owner.h
net/netfilter/xt_owner.c