Hello.
On 20.09.19 09:35, Greg Kroah-Hartman wrote:
> From: Ori Nimron <orinimron...@gmail.com>
>
> When creating a raw AF_IEEE802154 socket, CAP_NET_RAW needs to be
> checked first.
>
> Signed-off-by: Ori Nimron <orinimron...@gmail.com>
> Signed-off-by: Greg Kroah-Hartman <gre...@linuxfoundation.org>
> ---
> net/ieee802154/socket.c | 3 +++
> 1 file changed, 3 insertions(+)
>
> diff --git a/net/ieee802154/socket.c b/net/ieee802154/socket.c
> index badc5cfe4dc6..d93d4531aa9b 100644
> --- a/net/ieee802154/socket.c
> +++ b/net/ieee802154/socket.c
> @@ -1008,6 +1008,9 @@ static int ieee802154_create(struct net *net, struct
> socket *sock,
>
> switch (sock->type) {
> case SOCK_RAW:
> + rc = -EPERM;
> + if (!capable(CAP_NET_RAW))
> + goto out;
> proto = &ieee802154_raw_prot;
> ops = &ieee802154_raw_ops;
> break;
>
I assume this will go as a whole series into net. If you want me to pick
it up into my tree directly let me know.
Acked-by: Stefan Schmidt <ste...@datenfreihafen.org>
regards
Stefan Schmidt
