netdev - [PATCH v2 0/2] wireless: Allow wiphy/hwsim management from user namespaces

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-Id: <1462811639-29906-1-git-send-email-martin@strongswan.org>
Date:	Mon,  9 May 2016 18:33:57 +0200
From:	Martin Willi <martin@...ongswan.org>
To:	Johannes Berg <johannes@...solutions.net>
Cc:	linux-wireless@...r.kernel.org, netdev@...r.kernel.org
Subject: [PATCH v2 0/2] wireless: Allow wiphy/hwsim management from user namespaces

This patch set enables user namespaces having CAP_NET_ADMIN to manage
wiphy devices and create/destroy hwsim radios.

The first patch allows a caller from a non-initial user namespace to run
privileged nl80211 phy/dev operations. The second patch enables hwsim
radio management over Netlink from such namespaces. Together, with these
patches an unprivileged test environment can create user/network
namespaces and set up abitrary simulated wireless networks.

Changes from v1:
  * Use a simple counter in hwsim to assign netgroups to net namespaces.
  * Store hwsim net_generic() data in a struct, add accessors.
  * On namespace exit, do not destroy hwsim radios originally created in
    the initial network namespace.

Martin Willi (2):
  nl80211: Allow privileged operations from user namespaces
  mac80211_hwsim: Allow managing radios from non-initial namespaces

 drivers/net/wireless/mac80211_hwsim.c |  97 +++++++++++++++++++++-
 net/wireless/nl80211.c                | 150 +++++++++++++++++-----------------
 2 files changed, 169 insertions(+), 78 deletions(-)

--
2.7.4