netdev - Re: [RFC][PATCH kernel_bpf] honor CAP_NET_ADMIN for BPF_PROG

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <f3b59d9ac00eec18bc62a75f2dd6dbba48da0b35.camel@domdv.de>
Date:   Wed, 05 Jun 2019 12:59:48 +0200
From:   Andreas Steinmetz <ast@...dv.de>
To:     nicolas.dichtel@...nd.com, netdev@...r.kernel.org,
        bpf@...r.kernel.org
Subject: Re: [RFC][PATCH kernel_bpf] honor CAP_NET_ADMIN for BPF_PROG_LOAD

On Mon, 2019-06-03 at 19:12 +0200, Nicolas Dichtel wrote:
> It makes sense to me.
> Do you plan to submit it formally?
> 
> Looking a bit more at this topic, I see that most part of the bpf
> code uses
> capable(CAP_NET_ADMIN). I don't see why we cannot use
> ns_capable(CAP_NET_ADMIN).

If there is a change for this to get accepted, sure, I'm willing to
submit this formally (need some advice, though).

As for capable vs. ns_capable, this is a bit above my knowledge of
kernel internals.

Regards,
Andreas