Linux kernel mirror (for testing) git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git
kernel os linux

mISDN: enforce CAP_NET_RAW for raw sockets

When creating a raw AF_ISDN socket, CAP_NET_RAW needs to be checked
first.

Signed-off-by: Ori Nimron <orinimron123@gmail.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Signed-off-by: David S. Miller <davem@davemloft.net>

authored by

Ori Nimron and committed by
David S. Miller
b91ee4aa 3d66b89c

+2
+2
drivers/isdn/mISDN/socket.c
··· 754 754 755 755 if (sock->type != SOCK_RAW) 756 756 return -ESOCKTNOSUPPORT; 757 + if (!capable(CAP_NET_RAW)) 758 + return -EPERM; 757 759 758 760 sk = sk_alloc(net, PF_ISDN, GFP_KERNEL, &mISDN_proto, kern); 759 761 if (!sk)