Andrew Lutomirski eac664d283 net: Fix ns_capable check in sock_diag_put_filterinfo ... [ Upstream commit 78541c1dc6 ] The caller needs capabilities on the namespace being queried, not on their own namespace. This is a security bug, although it likely has only a minor impact. Cc: stable@vger.kernel.org Signed-off-by: Andy Lutomirski <luto@amacapital.net> Acked-by: Nicolas Dichtel <nicolas.dichtel@6wind.com> Signed-off-by: David S. Miller <davem@davemloft.net> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>		2014-05-30 21:52:15 -07:00
..
af_packet.c	packet: fix send path when running with proto == 0	2014-01-15 15:28:46 -08:00
diag.c	net: Fix ns_capable check in sock_diag_put_filterinfo	2014-05-30 21:52:15 -07:00
internal.h	packet: fix use after free race in send path when dev is released	2013-12-08 07:29:26 -08:00
Kconfig	packet: Diag core and basic socket info dumping	2012-08-14 16:56:33 -07:00
Makefile	packet: Diag core and basic socket info dumping	2012-08-14 16:56:33 -07:00