net: Fix ns_capable check in sock_diag_put_filterinfo
authorAndrew Lutomirski <[email protected]>
Thu, 17 Apr 2014 04:41:34 +0000 (21:41 -0700)
committerDavid S. Miller <[email protected]>
Tue, 22 Apr 2014 16:49:39 +0000 (12:49 -0400)
commit78541c1dc60b65ecfce5a6a096fc260219d6784e
tree45afae9a1e20fbd72426404b1d110aef9cfd6104
parentb0bda3853266121363a5ad8c786fa82d233538c1
net: Fix ns_capable check in sock_diag_put_filterinfo

The caller needs capabilities on the namespace being queried, not on
their own namespace.  This is a security bug, although it likely has
only a minor impact.

Cc: [email protected]
Signed-off-by: Andy Lutomirski <[email protected]>
Acked-by: Nicolas Dichtel <[email protected]>
Signed-off-by: David S. Miller <[email protected]>
include/linux/sock_diag.h
net/core/sock_diag.c
net/packet/diag.c