linux-kernel - Re: [PATCH 1/1] socket.7: Mention CAP_NET_RAW on SO

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <20240117091452.GB2665992@pevik>
Date: Wed, 17 Jan 2024 10:14:52 +0100
From: Petr Vorel <pvorel@...e.cz>
To: Alejandro Colomar <alx@...nel.org>
Cc: linux-man@...r.kernel.org,
	Maciej Żenczykowski <maze@...gle.com>,
	linux-kernel@...r.kernel.org, linux-api@...r.kernel.org,
	Matthias Gerstner <matthias.gerstner@...e.com>,
	Avinesh Kumar <akumar@...e.de>
Subject: Re: [PATCH 1/1] socket.7: Mention CAP_NET_RAW on SO_MARK

Hi Alex,

> Hi Petr,

> On Tue, Jan 16, 2024 at 12:04:18PM +0100, Petr Vorel wrote:
> > Added in 079925cce1d0 ("net: allow SO_MARK with CAP_NET_RAW") in v5.17.

> > Signed-off-by: Petr Vorel <pvorel@...e.cz>

> Patch applied.  Thanks!

Thank you! BTW I don't see this patch in git tree [1], maybe you just haven't
push yet.

Kind regards,
Petr

[1] https://git.kernel.org/pub/scm/docs/man-pages/man-pages.git/


> Have a lovely day,
> Alex

> > ---
> >  man7/socket.7 | 4 +++-
> >  1 file changed, 3 insertions(+), 1 deletion(-)

> > diff --git a/man7/socket.7 b/man7/socket.7
> > index 3ff8fe51b..3ebfc770b 100644
> > --- a/man7/socket.7
> > +++ b/man7/socket.7
> > @@ -614,7 +614,9 @@ Changing the mark can be used for mark-based
> >  routing without netfilter or for packet filtering.
> >  Setting this option requires the
> >  .B CAP_NET_ADMIN
> > -capability.
> > +or
> > +.B CAP_NET_RAW
> > +(since Linux 5.17) capability.
> >  .TP
> >  .B SO_OOBINLINE
> >  If this option is enabled,
> > -- 
> > 2.43.0