Kees Cook 2f590c4701 proc connector: reject unprivileged listener bumps ... commit e70ab97799 upstream. While PROC_CN_MCAST_LISTEN/IGNORE is entirely advisory, it was possible for an unprivileged user to turn off notifications for all listeners by sending PROC_CN_MCAST_IGNORE. Instead, require the same privileges as required for a multicast bind. Signed-off-by: Kees Cook <keescook@chromium.org> Cc: Evgeniy Polyakov <zbr@ioremap.net> Cc: Matt Helsley <matthltc@us.ibm.com> Acked-by: Evgeniy Polyakov <zbr@ioremap.net> Acked-by: Matt Helsley <matthltc@us.ibm.com> Signed-off-by: David S. Miller <davem@davemloft.net> [bwh: Backported to 3.2: adjust context] Signed-off-by: Ben Hutchings <ben@decadent.org.uk> Cc: Qiang Huang <h.huangqiang@huawei.com> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>		2014-03-11 16:10:03 -07:00
..
Kconfig	…
Makefile	…
cn_proc.c	proc connector: reject unprivileged listener bumps	2014-03-11 16:10:03 -07:00
cn_queue.c	…
connector.c	connector: use nlmsg_len() to check message length	2013-11-04 04:23:41 -08:00