Commit ddca1f39 authored Sep 20, 2019 by Ori Nimron Committed by Greg Kroah-Hartman Oct 05, 2019

ieee802154: enforce CAP_NET_RAW for raw sockets



[ Upstream commit e69dbd4619e7674c1679cba49afd9dd9ac347eef ]

When creating a raw AF_IEEE802154 socket, CAP_NET_RAW needs to be
checked first.

Signed-off-by: Ori Nimron <orinimron123@gmail.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Acked-by: Stefan Schmidt <stefan@datenfreihafen.org>
Signed-off-by: David S. Miller <davem@davemloft.net>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

parent 73b8d26c

net/ieee802154/socket.c

+3 −0

Original line number	Diff line number	Diff line
		@@ -1003,6 +1003,9 @@ static int ieee802154_create(struct net net, struct socket sock,

		switch (sock->type) {
		case SOCK_RAW:
		rc = -EPERM;
		if (!capable(CAP_NET_RAW))
		goto out;
		proto = &ieee802154_raw_prot;
		ops = &ieee802154_raw_ops;
		break;