linux-kernel - [PATCH 1/1] socket.7: Mention CAP_NET_RAW on SO

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Date: Tue, 16 Jan 2024 12:04:18 +0100
From: Petr Vorel <pvorel@...e.cz>
To: linux-man@...r.kernel.org
Cc: Petr Vorel <pvorel@...e.cz>,
	Maciej Żenczykowski <maze@...gle.com>,
	Alejandro Colomar <alx@...nel.org>,
	linux-kernel@...r.kernel.org,
	linux-api@...r.kernel.org,
	Matthias Gerstner <matthias.gerstner@...e.com>,
	Avinesh Kumar <akumar@...e.de>
Subject: [PATCH 1/1] socket.7: Mention CAP_NET_RAW on SO_MARK

Added in 079925cce1d0 ("net: allow SO_MARK with CAP_NET_RAW") in v5.17.

Signed-off-by: Petr Vorel <pvorel@...e.cz>
---
 man7/socket.7 | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/man7/socket.7 b/man7/socket.7
index 3ff8fe51b..3ebfc770b 100644
--- a/man7/socket.7
+++ b/man7/socket.7
@@ -614,7 +614,9 @@ Changing the mark can be used for mark-based
 routing without netfilter or for packet filtering.
 Setting this option requires the
 .B CAP_NET_ADMIN
-capability.
+or
+.B CAP_NET_RAW
+(since Linux 5.17) capability.
 .TP
 .B SO_OOBINLINE
 If this option is enabled,
-- 
2.43.0