Eric W. Biederman 5e1fccc0bf net: Allow userns root control of the core of the network stack. ... Allow an unpriviled user who has created a user namespace, and then created a network namespace to effectively use the new network namespace, by reducing capable(CAP_NET_ADMIN) and capable(CAP_NET_RAW) calls to be ns_capable(net->user_ns, CAP_NET_ADMIN), or capable(net->user_ns, CAP_NET_RAW) calls. Settings that merely control a single network device are allowed. Either the network device is a logical network device where restrictions make no difference or the network device is hardware NIC that has been explicity moved from the initial network namespace. In general policy and network stack state changes are allowed while resource control is left unchanged. Allow ethtool ioctls. Allow binding to network devices. Allow setting the socket mark. Allow setting the socket priority. Allow setting the network device alias via sysfs. Allow setting the mtu via sysfs. Allow changing the network device flags via sysfs. Allow setting the network device group via sysfs. Allow the following network device ioctls. SIOCGMIIPHY SIOCGMIIREG SIOCSIFNAME SIOCSIFFLAGS SIOCSIFMETRIC SIOCSIFMTU SIOCSIFHWADDR SIOCSIFSLAVE SIOCADDMULTI SIOCDELMULTI SIOCSIFHWBROADCAST SIOCSMIIREG SIOCBONDENSLAVE SIOCBONDRELEASE SIOCBONDSETHWADDR SIOCBONDCHANGEACTIVE SIOCBRADDIF SIOCBRDELIF SIOCSHWTSTAMP Signed-off-by: "Eric W. Biederman" <ebiederm@xmission.com> Signed-off-by: David S. Miller <davem@davemloft.net>		2012-11-18 20:32:45 -05:00
..
datagram.c
dev_addr_lists.c	net: correct check in dev_addr_del()	2012-11-15 17:57:53 -05:00
dev.c	net: Allow userns root control of the core of the network stack.	2012-11-18 20:32:45 -05:00
drop_monitor.c
dst.c
ethtool.c	net: Allow userns root control of the core of the network stack.	2012-11-18 20:32:45 -05:00
fib_rules.c	net: Push capable(CAP_NET_ADMIN) into the rtnl methods	2012-11-18 20:32:44 -05:00
filter.c	sk-filter: Add ability to get socket filter program (v2)	2012-11-01 11:17:15 -04:00
flow_dissector.c
flow.c
gen_estimator.c
gen_stats.c
iovec.c
link_watch.c
Makefile
neighbour.c	net: Push capable(CAP_NET_ADMIN) into the rtnl methods	2012-11-18 20:32:44 -05:00
net_namespace.c	userns: make each net (net_ns) belong to a user_ns	2012-11-18 20:30:55 -05:00
net-sysfs.c	net: Allow userns root control of the core of the network stack.	2012-11-18 20:32:45 -05:00
net-sysfs.h
net-traces.c
netevent.c
netpoll.c
netprio_cgroup.c	cgroup: net_prio: Mark local used function static	2012-10-26 03:40:50 -04:00
pktgen.c	pktgen: clean up ktime_t helpers	2012-11-03 14:50:15 -04:00
request_sock.c
rtnetlink.c	net: Push capable(CAP_NET_ADMIN) into the rtnl methods	2012-11-18 20:32:44 -05:00
scm.c	net: Allow userns root to force the scm creds	2012-11-18 20:32:45 -05:00
secure_seq.c
skbuff.c	Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net	2012-11-10 18:32:51 -05:00
sock_diag.c
sock.c	net: Allow userns root control of the core of the network stack.	2012-11-18 20:32:45 -05:00
stream.c
sysctl_net_core.c	net: Don't export sysctls to unprivileged users	2012-11-18 20:30:55 -05:00
timestamping.c
user_dma.c
utils.c	net: add doc for in4_pton()	2012-10-12 13:56:52 -04:00