| From foo@baz Mon Sep 17 13:33:56 CEST 2018 |
| From: Stephen Hemminger <stephen@networkplumber.org> |
| Date: Thu, 13 Sep 2018 07:58:39 -0700 |
| Subject: ipv6: export ip6 fragments sysctl to unprivileged users |
| To: davem@davemloft.net, gregkh@linuxfoundation.org |
| Cc: netdev@vger.kernel.org, stable@vger.kernel.org, edumazet@google.com, Nikolay Borisov <kernel@kyup.com> |
| Message-ID: <20180913145902.17531-8-sthemmin@microsoft.com> |
| |
| From: Eric Dumazet <edumazet@google.com> |
| |
| IPv4 was changed in commit 52a773d645e9 ("net: Export ip fragment |
| sysctl to unprivileged users") |
| |
| The only sysctl that is not per-netns is not used : |
| ip6frag_secret_interval |
| |
| Signed-off-by: Eric Dumazet <edumazet@google.com> |
| Cc: Nikolay Borisov <kernel@kyup.com> |
| Signed-off-by: David S. Miller <davem@davemloft.net> |
| (cherry picked from commit 18dcbe12fe9fca0ab825f7eff993060525ac2503) |
| Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org> |
| --- |
| net/ipv6/reassembly.c | 4 ---- |
| 1 file changed, 4 deletions(-) |
| |
| --- a/net/ipv6/reassembly.c |
| +++ b/net/ipv6/reassembly.c |
| @@ -649,10 +649,6 @@ static int __net_init ip6_frags_ns_sysct |
| table[1].data = &net->ipv6.frags.low_thresh; |
| table[1].extra2 = &net->ipv6.frags.high_thresh; |
| table[2].data = &net->ipv6.frags.timeout; |
| - |
| - /* Don't export sysctls to unprivileged users */ |
| - if (net->user_ns != &init_user_ns) |
| - table[0].procname = NULL; |
| } |
| |
| hdr = register_net_sysctl(net, "net/ipv6", table); |
