AuxXxilium/linux_dsm_epyc7002
1
0
Fork 0
mirror of https://github.com/AuxXxilium/linux_dsm_epyc7002.git synced 2025-03-11 23:27:42 +07:00
Code Issues Actions Packages Projects Releases Wiki Activity
464dc801c7
linux_dsm_epyc7002/net/ipv6
History
Eric W. Biederman 464dc801c7 net: Don't export sysctls to unprivileged users 
In preparation for supporting the creation of network namespaces
by unprivileged users, modify all of the per net sysctl exports
and refuse to allow them to unprivileged users.

This makes it safe for unprivileged users in general to access
per net sysctls, and allows sysctls to be exported to unprivileged
users on an individual basis as they are deemed safe.

Signed-off-by: "Eric W. Biederman" <ebiederm@xmission.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
2012-11-18 20:30:55 -05:00
..
netfilter Merge branch 'master' of git://1984.lsi.us.es/nf-next 2012-11-16 12:42:43 -05:00
addrconf_core.c
addrconf.c net: Don't export sysctls to unprivileged users 2012-11-18 20:30:55 -05:00
addrlabel.c
af_inet6.c ipv6: Pull IPv6 GSO registration out of the module 2012-11-15 17:39:24 -05:00
ah6.c ipv6: use IS_ENABLED() 2012-11-01 12:41:35 -04:00
anycast.c ipv6: introduce ip6_rt_put() 2012-11-03 14:59:05 -04:00
datagram.c ipv6: use IS_ENABLED() 2012-11-01 12:41:35 -04:00
esp6.c
exthdrs_core.c ipv6: Update ipv6 static library with newly needed functions 2012-11-15 17:39:23 -05:00
exthdrs_offload.c ipv6: Pull IPv6 GSO registration out of the module 2012-11-15 17:39:24 -05:00
exthdrs.c ipv6: Pull IPv6 GSO registration out of the module 2012-11-15 17:39:24 -05:00
fib6_rules.c ipv6: introduce ip6_rt_put() 2012-11-03 14:59:05 -04:00
icmp.c net: Don't export sysctls to unprivileged users 2012-11-18 20:30:55 -05:00
inet6_connection_sock.c
inet6_hashtables.c
ip6_fib.c ipv6: add support of equal cost multipath (ECMP) 2012-10-23 02:38:32 -04:00
ip6_flowlabel.c
ip6_gre.c net: unify for_each_ip_tunnel_rcu() 2012-11-14 18:49:50 -05:00
ip6_input.c
ip6_offload.c net: Remove code duplication between offload structures 2012-11-15 17:39:51 -05:00
ip6_offload.h ipv6: Pull IPv6 GSO registration out of the module 2012-11-15 17:39:24 -05:00
ip6_output.c ipv6: Update ipv6 static library with newly needed functions 2012-11-15 17:39:23 -05:00
ip6_tunnel.c ip6tnl: fix sparse warnings in ip6_tnl_netlink_parms() 2012-11-15 13:46:29 -05:00
ip6mr.c
ipcomp6.c
ipv6_sockglue.c Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net 2012-11-17 22:00:43 -05:00
Kconfig
Makefile ipv6: Preserve ipv6 functionality needed by NET 2012-11-18 02:34:00 -05:00
mcast.c ipv6: introduce ip6_rt_put() 2012-11-03 14:59:05 -04:00
mip6.c
ndisc.c ipv6: add knob to send unsolicited ND on link-layer address change 2012-11-13 14:27:45 -05:00
netfilter.c
output_core.c ipv6: Update ipv6 static library with newly needed functions 2012-11-15 17:39:23 -05:00
proc.c
protocol.c ipv6: Pull IPv6 GSO registration out of the module 2012-11-15 17:39:24 -05:00
raw.c ipv6: use IS_ENABLED() 2012-11-01 12:41:35 -04:00
reassembly.c net: Don't export sysctls to unprivileged users 2012-11-18 20:30:55 -05:00
route.c net: Don't export sysctls to unprivileged users 2012-11-18 20:30:55 -05:00
sit.c sit: fix sparse warnings 2012-11-15 13:46:29 -05:00
syncookies.c tcp: better retrans tracking for defer-accept 2012-11-03 14:45:00 -04:00
sysctl_net_ipv6.c net: Don't export sysctls to unprivileged users 2012-11-18 20:30:55 -05:00
tcp_ipv6.c ipv6: Pull IPv6 GSO registration out of the module 2012-11-15 17:39:24 -05:00
tcpv6_offload.c net: Remove code duplication between offload structures 2012-11-15 17:39:51 -05:00
tunnel6.c
udp_impl.h
udp_offload.c ipv6: Fix build error with udp_offload 2012-11-15 22:48:32 -05:00
udp.c ipv6: Pull IPv6 GSO registration out of the module 2012-11-15 17:39:24 -05:00
udplite.c
xfrm6_input.c
xfrm6_mode_beet.c
xfrm6_mode_ro.c
xfrm6_mode_transport.c
xfrm6_mode_tunnel.c
xfrm6_output.c
xfrm6_policy.c ipv6: use IS_ENABLED() 2012-11-01 12:41:35 -04:00
xfrm6_state.c ipv6: use IS_ENABLED() 2012-11-01 12:41:35 -04:00
xfrm6_tunnel.c