Lorenzo Colitti e2d118a1cb net: inet: Support UID-based routing in IP protocols. ... - Use the UID in routing lookups made by protocol connect() and sendmsg() functions. - Make sure that routing lookups triggered by incoming packets (e.g., Path MTU discovery) take the UID of the socket into account. - For packets not associated with a userspace socket, (e.g., ping replies) use UID 0 inside the user namespace corresponding to the network namespace the socket belongs to. This allows all namespaces to apply routing and iptables rules to kernel-originated traffic in that namespaces by matching UID 0. This is better than using the UID of the kernel socket that is sending the traffic, because the UID of kernel sockets created at namespace creation time (e.g., the per-processor ICMP and TCP sockets) is the UID of the user that created the socket, which might not be mapped in the namespace. Tested: compiles allnoconfig, allyesconfig, allmodconfig Tested: https://android-review.googlesource.com/253302 Signed-off-by: Lorenzo Colitti <lorenzo@google.com> Signed-off-by: David S. Miller <davem@davemloft.net>		2016-11-04 14:45:23 -04:00
..
netfilter	netfilter: move socket lookup infrastructure to nf_socket_ipv{4,6}.c	2016-11-01 20:50:31 +01:00
af_inet.c	net: add recursion limit to GRO	2016-10-20 14:32:22 -04:00
ah4.c
arp.c
cipso_ipv4.c
datagram.c
devinet.c	netconf: add a notif when settings are created	2016-09-01 15:18:08 -07:00
esp4.c
fib_frontend.c	net: core: add UID to flows, rules, and routes	2016-11-04 14:45:23 -04:00
fib_lookup.h
fib_rules.c	switchdev: remove FIB offload infrastructure	2016-09-28 04:48:00 -04:00
fib_semantics.c	Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net	2016-09-12 15:52:44 -07:00
fib_trie.c	switchdev: remove FIB offload infrastructure	2016-09-28 04:48:00 -04:00
fou.c	Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net	2016-10-30 12:42:58 -04:00
gre_demux.c
gre_offload.c	net: add recursion limit to GRO	2016-10-20 14:32:22 -04:00
icmp.c	net: inet: Support UID-based routing in IP protocols.	2016-11-04 14:45:23 -04:00
igmp.c
inet_connection_sock.c	net: inet: Support UID-based routing in IP protocols.	2016-11-04 14:45:23 -04:00
inet_diag.c	net: ip, diag -- Add diag interface for raw sockets	2016-10-23 19:35:24 -04:00
inet_fragment.c
inet_hashtables.c	net: Require exact match for TCP socket lookups if dif is l3mdev	2016-10-17 10:17:05 -04:00
inet_timewait_sock.c
inetpeer.c
ip_forward.c
ip_fragment.c
ip_gre.c	net/ip_tunnels: Introduce tunnel_id_to_key32() and key32_to_tunnel_id()	2016-09-10 20:53:55 -07:00
ip_input.c	net: VRF: Pass original iif to ip_route_input()	2016-09-16 04:24:07 -04:00
ip_options.c
ip_output.c	net: inet: Support UID-based routing in IP protocols.	2016-11-04 14:45:23 -04:00
ip_sockglue.c	ipv4: add IP_RECVFRAGSIZE cmsg	2016-11-03 15:41:11 -04:00
ip_tunnel_core.c	ip_tunnel: do not clear l4 hashes	2016-09-09 19:33:11 -07:00
ip_tunnel.c	ipv4/6: use core net MTU range checking	2016-10-20 14:51:10 -04:00
ip_vti.c	vti: use right inner_mode for inbound inter address family policy checks	2016-09-09 09:02:08 +02:00
ipcomp.c
ipconfig.c
ipip.c	ip_tunnel: add collect_md mode to IPIP tunnel	2016-09-17 10:13:07 -04:00
ipmr.c	net: Enable support for VRF with ipv4 multicast	2016-11-01 11:54:26 -04:00
Kconfig	net: ip, diag -- Add diag interface for raw sockets	2016-10-23 19:35:24 -04:00
Makefile	net: ip, diag -- Add diag interface for raw sockets	2016-10-23 19:35:24 -04:00
netfilter.c
ping.c	net: inet: Support UID-based routing in IP protocols.	2016-11-04 14:45:23 -04:00
proc.c	net: Suppress the "Comparison to NULL could be written" warnings	2016-09-30 01:50:45 -04:00
protocol.c
raw_diag.c	net: ip, raw_diag -- Use jump for exiting from nested loop	2016-11-03 15:25:26 -04:00
raw.c	net: inet: Support UID-based routing in IP protocols.	2016-11-04 14:45:23 -04:00
route.c	net: inet: Support UID-based routing in IP protocols.	2016-11-04 14:45:23 -04:00
syncookies.c	net: inet: Support UID-based routing in IP protocols.	2016-11-04 14:45:23 -04:00
sysctl_net_ipv4.c	ipv4: use the right lock for ping_group_range	2016-10-22 16:23:12 -04:00
tcp_bbr.c	tcp_bbr: add a state transition diagram and accompanying comment	2016-10-29 17:12:43 -04:00
tcp_bic.c
tcp_cdg.c	tcp: cdg: rename struct minmax in tcp_cdg.c to avoid a naming conflict	2016-09-21 00:22:59 -04:00
tcp_cong.c	tcp: new CC hook to set sending rate with rate_sample in any CA state	2016-09-21 00:23:01 -04:00
tcp_cubic.c
tcp_dctcp.c
tcp_diag.c
tcp_fastopen.c	tcp: fastopen: avoid negative sk_forward_alloc	2016-09-08 16:08:10 -07:00
tcp_highspeed.c
tcp_htcp.c
tcp_hybla.c
tcp_illinois.c
tcp_input.c	tcp/dccp: drop SYN packets if accept queue is full	2016-10-29 15:09:21 -04:00
tcp_ipv4.c	net: inet: Support UID-based routing in IP protocols.	2016-11-04 14:45:23 -04:00
tcp_lp.c
tcp_metrics.c	genetlink: mark families as __ro_after_init	2016-10-27 16:16:09 -04:00
tcp_minisocks.c	tcp: track application-limited rate samples	2016-09-21 00:23:00 -04:00
tcp_nv.c
tcp_offload.c	gso: Support partial splitting at the frag_list pointer	2016-09-19 20:59:34 -04:00
tcp_output.c	tcp: enhance tcp collapsing	2016-11-02 15:21:36 -04:00
tcp_probe.c
tcp_rate.c	tcp: export data delivery rate	2016-09-21 00:23:00 -04:00
tcp_recovery.c
tcp_scalable.c
tcp_timer.c	tcp: Change txhash on every SYN and RTO retransmit	2016-09-28 07:52:34 -04:00
tcp_vegas.c
tcp_vegas.h
tcp_veno.c
tcp_westwood.c
tcp_yeah.c	tcp: cwnd does not increase in TCP YeAH	2016-09-08 17:16:12 -07:00
tcp.c	Merge branch 'akpm' (patches from Andrew)	2016-10-07 21:38:00 -07:00
tunnel4.c
udp_diag.c	net: inet: diag: expose the socket mark to privileged processes.	2016-09-08 16:13:09 -07:00
udp_impl.h
udp_offload.c	net: add recursion limit to GRO	2016-10-20 14:32:22 -04:00
udp_tunnel.c
udp.c	net: inet: Support UID-based routing in IP protocols.	2016-11-04 14:45:23 -04:00
udplite.c
xfrm4_input.c
xfrm4_mode_beet.c
xfrm4_mode_transport.c
xfrm4_mode_tunnel.c
xfrm4_output.c
xfrm4_policy.c	Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net	2016-09-12 15:52:44 -07:00
xfrm4_protocol.c
xfrm4_state.c
xfrm4_tunnel.c