Florian Westphal 6f2a4ac365 netfilter: ebtables: enforce CAP_NET_ADMIN ...

commit dce766af541f6605fa9889892c0280bab31c66ab upstream.

normal users are currently allowed to set/modify ebtables rules.
Restrict it to processes with CAP_NET_ADMIN.

Note that this cannot be reproduced with unmodified ebtables binary
because it uses SOCK_RAW.

Signed-off-by: Florian Westphal <fwestphal@astaro.com>
Signed-off-by: Patrick McHardy <kaber@trash.net>
Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>

2010-01-18 10:28:48 -08:00

..

netfilter

netfilter: ebtables: enforce CAP_NET_ADMIN

2010-01-18 10:28:48 -08:00

br_device.c

netdev: add more functions to netdevice ops

2008-11-20 20:14:53 -08:00

br_fdb.c

bridge: Simplify interface for ATM LANE

2009-06-11 21:03:21 -07:00

br_forward.c

bridge: Fix LRO crash with tun

2009-02-09 15:07:18 -08:00

br_if.c

net/bridge: use kobject_put to release kobject in br_add_if error path

2009-07-26 19:20:51 -07:00

br_input.c

bridge: relay bridge multicast pkgs if !STP

2009-05-17 21:12:54 -07:00

br_ioctl.c

Merge branch 'master' of master.kernel.org:/pub/scm/linux/kernel/git/torvalds/linux-2.6

2008-09-08 16:59:05 -07:00

br_netfilter.c

netfilter: bridge: refcount fix

2009-10-05 09:32:31 -07:00

br_netlink.c

netlink: change nlmsg_notify() return value logic

2009-02-24 23:18:28 -08:00

br_notify.c

netns bridge: allow bridges in netns!

2008-09-08 16:19:58 -07:00

br_private_stp.h

net: remove CVS keywords

2008-06-11 21:00:38 -07:00

br_private.h

bridge: Simplify interface for ATM LANE

2009-06-11 21:03:21 -07:00

br_stp_bpdu.c

netns bridge: allow bridges in netns!

2008-09-08 16:19:58 -07:00

br_stp_if.c

bridge: make bridge address settings sticky

2008-06-17 16:10:06 -07:00

br_stp_timer.c

net: remove CVS keywords

2008-06-11 21:00:38 -07:00

br_stp.c

bridge: fix initial packet flood if !STP

2009-05-17 21:12:55 -07:00

br_sysfs_br.c

net: Fix bridgeing sysfs handling of rtnl_lock

2009-05-18 22:15:59 -07:00

br_sysfs_if.c

net: Fix bridgeing sysfs handling of rtnl_lock

2009-05-18 22:15:59 -07:00

br.c

bridge: Use rcu_barrier() instead of syncronize_net() on unload.

2009-06-26 13:51:32 -07:00

Kconfig

bridge: Use STP demux

2008-07-05 21:25:56 -07:00

Makefile

…