From: Mahesh Bandewar <mahe...@google.com> Date: Wed, 10 Jun 2015 17:19:56 -0700
> Actor and Partner details can be accessed via proc-fs and sys-fs > entries. These interfaces are world readable at this moment. The > earlier patch-series made the LACP communication secure to avoid > nuisance attack from within the same L2 domain but it did not > prevent "someone unprivileged" looking at that information on host > and perform the same act. > > This patch essentially avoids spitting those entries if the user > in question does not have enough privileges. > > Signed-off-by: Mahesh Bandewar <mahe...@google.com> I agree with Stephen Hemminger in that you should probably be using CAP_NET_ADMIN here. -- To unsubscribe from this list: send the line "unsubscribe netdev" in the body of a message to majord...@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html
