| commit | 8ab78863e9eff11910e1ac8bcf478060c29b379e | [log] [tgz] |
|---|---|---|
| author | Jeimon <jjjinmeng.zhou@gmail.com> | Sat May 08 11:52:30 2021 +0800 |
| committer | David S. Miller <davem@davemloft.net> | Mon May 10 14:21:02 2021 -0700 |
| tree | 4cd867763afd58d39079a7e862f1813b3dd52b73 | |
| parent | b741596468b010af2846b75f5e75a842ce344a6e [diff] |
net/nfc/rawsock.c: fix a permission check bug The function rawsock_create() calls a privileged function sk_alloc(), which requires a ns-aware check to check net->user_ns, i.e., ns_capable(). However, the original code checks the init_user_ns using capable(). So we replace the capable() with ns_capable(). Signed-off-by: Jeimon <jjjinmeng.zhou@gmail.com> Signed-off-by: David S. Miller <davem@davemloft.net>