Eric W. Biederman fdab6a4cbd netfilter: nftables: Do not run chains in the wrong network namespace ... Currenlty nf_tables chains added in one network namespace are being run in all network namespace. The issues are myriad with the simplest being an unprivileged user can cause any network packets to be dropped. Address this by simply not running nf_tables chains in the wrong network namespace. Cc: stable@vger.kernel.org Signed-off-by: "Eric W. Biederman" <ebiederm@xmission.com> Acked-by: Pablo Neira Ayuso <pablo@netfilter.org> Signed-off-by: David S. Miller <davem@davemloft.net>		2015-06-23 06:23:22 -07:00
..
6lowpan	6lowpan: nhc: add other known rfc6282 compressions	2015-02-14 23:08:44 +01:00
9p	9p: patches for 4.1 merge window	2015-04-18 17:45:30 -04:00
802	net: Kill dev_rebuild_header	2015-03-02 16:43:41 -05:00
8021q	vlan: Add GRO support for non hardware accelerated vlan	2015-06-01 16:50:52 -07:00
appletalk	net: Pass kern from net_proto_family.create to sk_alloc	2015-05-11 10:50:17 -04:00
atm	net: Pass kern from net_proto_family.create to sk_alloc	2015-05-11 10:50:17 -04:00
ax25	netfilter: Remove spurios included of netfilter.h	2015-06-18 21:14:32 +02:00
batman-adv	batman-adv: change the MAC of each VLAN upon ndo_set_mac_address	2015-06-07 17:07:20 +02:00
bluetooth	Bluetooth: Fix warning of potentially uninitialized adv_instance variable	2015-06-18 21:05:31 +03:00
bridge	bridge: multicast: start querier timer when running user-space stp	2015-06-23 03:29:54 -07:00
caif	Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net	2015-06-01 22:51:30 -07:00
can	can: cangw: introduce optional uid to reference created routing jobs	2015-06-09 09:39:49 +02:00
ceph	Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net	2015-06-01 22:51:30 -07:00
core	bpf: disallow bpf tc programs access current->pid,uid	2015-06-15 20:51:20 -07:00
dcb	net/dcb: Add IEEE QCN attribute	2015-03-06 21:50:02 -05:00
dccp	sock_diag: specify info_size per inet protocol	2015-06-15 19:49:22 -07:00
decnet	net: Pass kern from net_proto_family.create to sk_alloc	2015-05-11 10:50:17 -04:00
dns_resolver
dsa	Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net	2015-06-01 22:51:30 -07:00
ethernet	net: Add full IPv6 addresses to flow_keys	2015-06-04 15:44:30 -07:00
hsr	net/hsr: Fix NULL pointer dereference and refcnt bugs when deleting a HSR interface.	2015-03-01 13:40:23 -05:00
ieee802154	nl802154: export supported commands	2015-06-04 12:27:15 +02:00
ipv4	inet_diag: Remove _bh suffix in inet_diag_dump_reqs().	2015-06-23 01:19:52 -07:00
ipv6	netfilter: don't pull include/linux/netfilter.h from netns headers	2015-06-18 21:14:31 +02:00
ipx	net: Pass kern from net_proto_family.create to sk_alloc	2015-05-11 10:50:17 -04:00
irda	irda: use msecs_to_jiffies for conversion to jiffies	2015-05-25 17:46:21 -04:00
iucv	net: Pass kern from net_proto_family.create to sk_alloc	2015-05-11 10:50:17 -04:00
key	net: Pass kern from net_proto_family.create to sk_alloc	2015-05-11 10:50:17 -04:00
l2tp	net: Modify sk_alloc to not reference count the netns of kernel sockets.	2015-05-11 10:50:18 -04:00
lapb
llc	net: Pass kern from net_proto_family.create to sk_alloc	2015-05-11 10:50:17 -04:00
mac80211	mac80211: convert HW flags to unsigned long bitmap	2015-06-10 16:05:36 +02:00
mac802154	mac802154: iface: cleanup stack variable	2015-06-17 16:00:40 +02:00
mpls	Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net	2015-06-13 23:56:52 -07:00
netfilter	netfilter: nftables: Do not run chains in the wrong network namespace	2015-06-23 06:23:22 -07:00
netlabel	netlink: implement nla_put_in_addr and nla_put_in6_addr	2015-03-31 13:58:35 -04:00
netlink	netlink: add API to retrieve all group memberships	2015-06-21 10:18:18 -07:00
netrom	netfilter: Remove spurios included of netfilter.h	2015-06-18 21:14:32 +02:00
nfc	NFC: nci: fix mistake in uart generic driver	2015-06-15 18:10:37 +02:00
openvswitch	Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net	2015-06-08 20:06:56 -07:00
packet	packet: free packet_rollover after synchronize_net	2015-06-21 09:30:42 -07:00
phonet	net: Pass kern from net_proto_family.create to sk_alloc	2015-05-11 10:50:17 -04:00
rds	net: rds: use for_each_sg() for scatterlist parsing	2015-06-21 09:32:08 -07:00
rfkill	net: rfkill: gpio: make better use of gpiod API	2015-05-29 13:13:45 +02:00
rose	netfilter: Remove spurios included of netfilter.h	2015-06-18 21:14:32 +02:00
rxrpc	net: Pass kern from net_proto_family.create to sk_alloc	2015-05-11 10:50:17 -04:00
sched	pkt_sched: sch_qfq: remove redundant -if- control statement	2015-06-21 09:47:24 -07:00
sctp	Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net	2015-06-13 23:56:52 -07:00
sunrpc	svcrpc: fix potential GSSX_ACCEPT_SEC_CONTEXT decoding failures	2015-05-04 12:02:40 -04:00
switchdev	switchdev: fdb filter_dev is always NULL for self (device), so remove check	2015-06-23 00:58:27 -07:00
tipc	Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net	2015-06-13 23:56:52 -07:00
unix	net/unix: support SCM_SECURITY for stream sockets	2015-06-10 22:49:20 -07:00
vmw_vsock	net: Pass kern from net_proto_family.create to sk_alloc	2015-05-11 10:50:17 -04:00
wimax
wireless	Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net	2015-06-13 23:56:52 -07:00
x25	net: Pass kern from net_proto_family.create to sk_alloc	2015-05-11 10:50:17 -04:00
xfrm	Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net	2015-06-01 22:51:30 -07:00
compat.c	net: switch importing msghdr from userland to {compat_,}import_iovec()	2015-04-09 00:02:26 -04:00
Kconfig	net: add CONFIG_NET_INGRESS to enable ingress filtering	2015-05-14 01:10:05 -04:00
Makefile	mpls: Refactor how the mpls module is built	2015-03-04 00:26:06 -05:00
socket.c	net: Add a struct net parameter to sock_create_kern	2015-05-11 10:50:17 -04:00
sysctl_net.c