| commit | 0e6ba2ddc411e23f420c27456673c5d01685097b | [log] [tgz] |
|---|---|---|
| author | Andy Lutomirski <luto@amacapital.net> | Wed Apr 16 20:57:41 2014 -0700 |
| committer | Andy Lutomirski <luto@amacapital.net> | Wed Apr 16 21:41:08 2014 -0700 |
| tree | 2b7035890b8ee80b8832c581b7d7b1232a346311 | |
| parent | 455c6fdbd219161bd09b1165f11699d6d73de11c [diff] |
net: Fix ns_capable check in sock_diag_put_filterinfo The caller needs capabilities on the namespace being queried, not on their own namespace. This is a security bug, although it likely has only a minor impact. Signed-off-by: Andy Lutomirski <luto@amacapital.net>