mbox series

[net,0/2] Generic netlink multicast fixes

Message ID 20231206213102.1824398-1-idosch@nvidia.com (mailing list archive)
Headers show
Series Generic netlink multicast fixes | expand

Message

Ido Schimmel Dec. 6, 2023, 9:31 p.m. UTC 
Restrict two generic netlink multicast groups - in the "psample" and
"NET_DM" families - to be root-only with the appropriate capabilities.
See individual patches for more details.

Ido Schimmel (2):
  psample: Require 'CAP_NET_ADMIN' when joining "packets" group
  drop_monitor: Require 'CAP_SYS_ADMIN' when joining "events" group

 include/net/genetlink.h | 2 ++
 net/core/drop_monitor.c | 4 +++-
 net/netlink/genetlink.c | 3 +++
 net/psample/psample.c   | 3 ++-
 4 files changed, 10 insertions(+), 2 deletions(-)

Comments

patchwork-bot+netdevbpf@kernel.org Dec. 7, 2023, 6 p.m. UTC | #1 
Hello:

This series was applied to netdev/net.git (main)
by Jakub Kicinski <kuba@kernel.org>:

On Wed, 6 Dec 2023 23:31:00 +0200 you wrote:
> Restrict two generic netlink multicast groups - in the "psample" and
> "NET_DM" families - to be root-only with the appropriate capabilities.
> See individual patches for more details.
> 
> Ido Schimmel (2):
>   psample: Require 'CAP_NET_ADMIN' when joining "packets" group
>   drop_monitor: Require 'CAP_SYS_ADMIN' when joining "events" group
> 
> [...]

Here is the summary with links:
  - [net,1/2] psample: Require 'CAP_NET_ADMIN' when joining "packets" group
    https://git.kernel.org/netdev/net/c/44ec98ea5ea9
  - [net,2/2] drop_monitor: Require 'CAP_SYS_ADMIN' when joining "events" group
    https://git.kernel.org/netdev/net/c/e03781879a0d

You are awesome, thank you!