| commit | 78541c1dc60b65ecfce5a6a096fc260219d6784e | [log] [tgz] |
|---|---|---|
| author | Andrew Lutomirski <luto@amacapital.net> | Wed Apr 16 21:41:34 2014 -0700 |
| committer | David S. Miller <davem@davemloft.net> | Tue Apr 22 12:49:39 2014 -0400 |
| tree | 45afae9a1e20fbd72426404b1d110aef9cfd6104 | |
| parent | b0bda3853266121363a5ad8c786fa82d233538c1 [diff] |
net: Fix ns_capable check in sock_diag_put_filterinfo The caller needs capabilities on the namespace being queried, not on their own namespace. This is a security bug, although it likely has only a minor impact. Cc: stable@vger.kernel.org Signed-off-by: Andy Lutomirski <luto@amacapital.net> Acked-by: Nicolas Dichtel <nicolas.dichtel@6wind.com> Signed-off-by: David S. Miller <davem@davemloft.net>