diff options
| author | Thomas Haller <[email protected]> | 2022-09-06 22:55:42 +0200 |
|---|---|---|
| committer | Paolo Abeni <[email protected]> | 2022-09-15 12:01:02 +0200 |
| commit | d156971854045120e1eab74b9e9ec2ac516ba91f (patch) | |
| tree | e4124daab35e274b1193ab185434ee31722039b9 /tools/perf/scripts/python | |
| parent | 0522b424c4c2a1f7d79d62b7723c07d3415d94e5 (diff) | |
mptcp: allow privileged operations from user namespaces
GENL_ADMIN_PERM checks that the user has CAP_NET_ADMIN in the initial
namespace by calling netlink_capable(). Instead, use GENL_UNS_ADMIN_PERM
which uses netlink_ns_capable(). This checks that the caller has
CAP_NET_ADMIN in the current user namespace.
See also
commit 4a92602aa1cd ("openvswitch: allow management from inside user namespaces")
which introduced this mechanism. See also
commit 5617c6cd6f84 ("nl80211: Allow privileged operations from user namespaces")
which introduced this for nl80211.
Signed-off-by: Thomas Haller <[email protected]>
Reviewed-by: Mat Martineau <[email protected]>
Signed-off-by: Matthieu Baerts <[email protected]>
Signed-off-by: Paolo Abeni <[email protected]>
Diffstat (limited to 'tools/perf/scripts/python')
0 files changed, 0 insertions, 0 deletions