diff options
| author | Eric W. Biederman <ebiederm@xmission.com> | 2012-05-24 10:34:21 -0600 |
|---|---|---|
| committer | Eric W. Biederman <ebiederm@xmission.com> | 2012-08-14 21:49:10 -0700 |
| commit | 7064d16e162adf8199f0288b694e6af823ed5431 (patch) | |
| tree | 02563996ee28d686b1cb9a16ba389b382aa6bb4f /init | |
| parent | a7cb5a49bf64ba64864ae16a6be028f8b0d3cc06 (diff) | |
| download | linux-stable-7064d16e162adf8199f0288b694e6af823ed5431.tar.gz linux-stable-7064d16e162adf8199f0288b694e6af823ed5431.tar.bz2 linux-stable-7064d16e162adf8199f0288b694e6af823ed5431.zip | |
userns: Use kgids for sysctl_ping_group_range
- Store sysctl_ping_group_range as a paire of kgid_t values
instead of a pair of gid_t values.
- Move the kgid conversion work from ping_init_sock into ipv4_ping_group_range
- For invalid cases reset to the default disabled state.
With the kgid_t conversion made part of the original value sanitation
from userspace understand how the code will react becomes clearer
and it becomes possible to set the sysctl ping group range from
something other than the initial user namespace.
Cc: Vasiliy Kulikov <segoon@openwall.com>
Acked-by: David S. Miller <davem@davemloft.net>
Signed-off-by: Eric W. Biederman <ebiederm@xmission.com>
Diffstat (limited to 'init')
| -rw-r--r-- | init/Kconfig | 1 |
1 files changed, 0 insertions, 1 deletions
diff --git a/init/Kconfig b/init/Kconfig index 25a6ebb50c64..f857f97bcef3 100644 --- a/init/Kconfig +++ b/init/Kconfig @@ -948,7 +948,6 @@ config UIDGID_CONVERTED depends on NETFILTER_XT_MATCH_RECENT = n depends on NETFILTER_XT_TARGET_LOG = n depends on NETFILTER_NETLINK_LOG = n - depends on INET = n depends on IPV6 = n depends on AF_RXRPC = n depends on NET_KEY = n |