Tyler Hicks d6e0d30644 net: Use ns_capable_noaudit() when determining net sysctl permissions ... The capability check should not be audited since it is only being used to determine the inode permissions. A failed check does not indicate a violation of security policy but, when an LSM is enabled, a denial audit message was being generated. The denial audit message caused confusion for some application authors because root-running Go applications always triggered the denial. To prevent this confusion, the capability check in net_ctl_permissions() is switched to the noaudit variant. BugLink: https://launchpad.net/bugs/1465724 Signed-off-by: Tyler Hicks <tyhicks@canonical.com> Acked-by: Serge E. Hallyn <serge.hallyn@ubuntu.com> Signed-off-by: James Morris <james.l.morris@oracle.com>		2016-06-06 20:16:22 +10:00
..
6lowpan
9p	remove lots of IS_ERR_VALUE abuses	2016-05-27 15:26:11 -07:00
802
8021q	vlan: Propagate MAC address to VLANs	2016-05-31 11:56:48 -07:00
appletalk
atm	net/atm: sk_err_soft must be positive	2016-05-23 13:51:10 -07:00
ax25
batman-adv	batman-adv: initialize ELP orig address on secondary interfaces	2016-05-18 11:49:44 +08:00
bluetooth	Bluetooth: fix power_on vs close race	2016-05-13 16:50:23 +02:00
bridge
caif
can
ceph	libceph: use %s instead of %pE in dout()s	2016-05-30 23:00:23 +02:00
core	net: pktgen: Call destroy_hrtimer_on_stack()	2016-05-31 11:44:08 -07:00
dcb
dccp
decnet
dns_resolver
dsa	dsa: Rename switch chip data to cd	2016-05-11 19:36:28 -04:00
ethernet
hsr	net/hsr: Use setup_timer and mod_timer.	2016-05-16 14:00:43 -04:00
ieee802154	ieee802154: fix logic error in ieee802154_llsec_parse_dev_addr	2016-05-29 22:36:25 -07:00
ipv4	ipv4: Fix non-initialized TTL when CONFIG_SYSCTL=n	2016-05-23 14:32:06 -07:00
ipv6	fou: fix IPv6 Kconfig options	2016-05-31 14:07:49 -07:00
ipx
irda	TTY and Serial driver update for 4.7-rc1	2016-05-20 20:57:27 -07:00
iucv
kcm	kcm: fix a signedness in kcm_splice_read()	2016-05-19 11:26:51 -07:00
key
l2tp	net: l2tp: Make l2tp_ip6 namespace aware	2016-05-30 00:03:53 -07:00
l3mdev
lapb	net/lapb: tuse %*ph to dump buffers	2016-05-29 22:33:25 -07:00
llc
mac80211	Some more work for 4.7, notably:	2016-05-12 11:46:58 -04:00
mac802154
mpls	gso: Remove arbitrary checks for unsupported GSO	2016-05-20 18:03:15 -04:00
netfilter	net: define gso types for IPx over IPv4 and IPv6	2016-05-20 18:03:15 -04:00
netlabel
netlink	netlink: Fix dump skb leak/double free	2016-05-16 22:05:15 -04:00
netrom
nfc
openvswitch	openvswitch: update checksum in {push,pop}_mpls	2016-05-31 13:51:42 -07:00
packet
phonet
qrtr	Merge tag 'qcom-soc-for-4.7-2' into net-next	2016-05-17 14:11:19 -04:00
rds	Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net	2016-05-20 20:01:26 -07:00
rfkill
rose
rxrpc	Merge branch 'next' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security	2016-05-19 09:21:36 -07:00
sched	net sched actions: policer missing timestamp processing	2016-05-24 16:23:23 -07:00
sctp	sctp: sctp_diag should dump sctp socket type	2016-05-31 11:59:06 -07:00
sunrpc	NFS client updates for Linux 4.7	2016-05-26 10:33:33 -07:00
switchdev	switchdev: pass pointer to fib_info instead of copy	2016-05-17 13:58:49 -04:00
tipc	tipc: fix potential null pointer dereferences in some compat functions	2016-05-25 12:33:52 -07:00
unix
vmw_vsock
wimax
wireless	mm/page_ref: use page_ref helper instead of direct modification of _count	2016-05-19 19:12:14 -07:00
x25
xfrm
compat.c
Kconfig	bpf: add generic constant blinding for use in jits	2016-05-16 13:49:32 -04:00
Makefile
socket.c	fs: poll/select/recvmmsg: use timespec64 for timeout events	2016-05-19 19:12:14 -07:00
sysctl_net.c	net: Use ns_capable_noaudit() when determining net sysctl permissions	2016-06-06 20:16:22 +10:00