q3k
/
linux
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
linux/net/ipv4/netfilter
History
Björn Steinbrink 82fac0542e [NETFILTER]: Missing check for CAP_NET_ADMIN in iptables compat layer 
The 32bit compatibility layer has no CAP_NET_ADMIN check in
compat_do_ipt_get_ctl, which for example allows to list the current
iptables rules even without having that capability (the non-compat
version requires it). Other capabilities might be required to exploit
the bug (eg. CAP_NET_RAW to get the nfnetlink socket?), so a plain user
can't exploit it, but a setup actually using the posix capability system
might very well hit such a constellation of granted capabilities.

Signed-off-by: Björn Steinbrink <B.Steinbrink@gmx.de>
Signed-off-by: Patrick McHardy <kaber@trash.net>
Signed-off-by: David S. Miller <davem@davemloft.net>
 		2006-10-20 00:21:10 -07:00
..
Kconfig more misc typo fixes 2006-10-03 22:34:14 +02:00
Makefile
…
arp_tables.c [NETFILTER]: arp_tables: missing unregistration on module unload 2006-10-15 23:14:07 -07:00
arpt_mangle.c
…
arptable_filter.c
…
ip_conntrack_amanda.c [NETFILTER]: conntrack annotations 2006-09-28 18:03:00 -07:00
ip_conntrack_core.c [NETFILTER]: conntrack annotations 2006-09-28 18:03:00 -07:00
ip_conntrack_ftp.c [NETFILTER]: conntrack annotations 2006-09-28 18:03:00 -07:00
ip_conntrack_helper_h323.c [NETFILTER]: h323 annotations 2006-09-28 18:03:03 -07:00
ip_conntrack_helper_h323_asn1.c
…
ip_conntrack_helper_h323_types.c
…
ip_conntrack_helper_pptp.c [NETFILTER]: conntrack annotations 2006-09-28 18:03:00 -07:00
ip_conntrack_irc.c [NETFILTER]: conntrack annotations 2006-09-28 18:03:00 -07:00
ip_conntrack_netbios_ns.c [NETFILTER]: conntrack annotations 2006-09-28 18:03:00 -07:00
ip_conntrack_netlink.c [NETFILTER]: ctnetlink: Remove debugging messages 2006-10-15 23:14:11 -07:00
ip_conntrack_proto_generic.c
…
ip_conntrack_proto_gre.c [NETFILTER]: PPTP conntrack: fix whitespace errors 2006-09-22 15:20:07 -07:00
ip_conntrack_proto_icmp.c [NETFILTER]: conntrack annotations 2006-09-28 18:03:00 -07:00
ip_conntrack_proto_sctp.c [NETFILTER]: conntrack annotations 2006-09-28 18:03:00 -07:00
ip_conntrack_proto_tcp.c [NETFILTER]: conntrack annotations 2006-09-28 18:03:00 -07:00
ip_conntrack_proto_udp.c
…
ip_conntrack_sip.c [NETFILTER]: conntrack annotations 2006-09-28 18:03:00 -07:00
ip_conntrack_standalone.c
…
ip_conntrack_tftp.c [NETFILTER]: conntrack annotations 2006-09-28 18:03:00 -07:00
ip_nat_amanda.c
…
ip_nat_core.c [NETFILTER]: NAT annotations 2006-09-28 18:03:01 -07:00
ip_nat_ftp.c [NETFILTER]: NAT annotations 2006-09-28 18:03:01 -07:00
ip_nat_helper.c [NETFILTER]: NAT annotations 2006-09-28 18:03:01 -07:00
ip_nat_helper_h323.c [NETFILTER]: h323 annotations 2006-09-28 18:03:03 -07:00
ip_nat_helper_pptp.c [NETFILTER]: NAT annotations 2006-09-28 18:03:01 -07:00
ip_nat_irc.c
…
ip_nat_proto_gre.c [NETFILTER]: PPTP conntrack: get rid of unnecessary byte order conversions 2006-09-22 15:20:08 -07:00
ip_nat_proto_icmp.c [NETFILTER]: NAT annotations 2006-09-28 18:03:01 -07:00
ip_nat_proto_tcp.c [NETFILTER]: NAT annotations 2006-09-28 18:03:01 -07:00
ip_nat_proto_udp.c [NETFILTER]: NAT annotations 2006-09-28 18:03:01 -07:00
ip_nat_proto_unknown.c
…
ip_nat_rule.c [NETFILTER]: NAT annotations 2006-09-28 18:03:01 -07:00
ip_nat_sip.c [NETFILTER]: NAT annotations 2006-09-28 18:03:01 -07:00
ip_nat_snmp_basic.c [NETFILTER]: NAT annotations 2006-09-28 18:03:01 -07:00
ip_nat_standalone.c [NETFILTER]: add type parameter to ip_route_me_harder 2006-10-04 00:30:54 -07:00
ip_nat_tftp.c
…
ip_queue.c [NETFILTER]: make some netfilter globals __read_mostly 2006-09-22 15:19:58 -07:00
ip_tables.c [NETFILTER]: Missing check for CAP_NET_ADMIN in iptables compat layer 2006-10-20 00:21:10 -07:00
ipt_CLUSTERIP.c [NETFILTER]: ipt annotations 2006-09-28 18:03:02 -07:00
ipt_ECN.c [NETFILTER]: ipt_ECN/ipt_TOS: fix incorrect checksum update 2006-10-15 23:14:08 -07:00
ipt_LOG.c
…
ipt_MASQUERADE.c [IPV4]: inet_select_addr() annotations 2006-09-28 17:54:08 -07:00
ipt_NETMAP.c [NETFILTER]: ipt annotations 2006-09-28 18:03:02 -07:00
ipt_REDIRECT.c [IPV4]: annotate struct in_ifaddr 2006-09-28 18:00:55 -07:00
ipt_REJECT.c [NETFILTER]: ipt_REJECT: remove largely duplicate route_reverse function 2006-10-04 00:30:56 -07:00
ipt_SAME.c [NETFILTER]: ipt annotations 2006-09-28 18:03:02 -07:00
ipt_TCPMSS.c [NETFILTER]: ipt annotations 2006-09-28 18:03:02 -07:00
ipt_TOS.c [NETFILTER]: ipt_ECN/ipt_TOS: fix incorrect checksum update 2006-10-15 23:14:08 -07:00
ipt_TTL.c [NETFILTER]: ipt annotations 2006-09-28 18:03:02 -07:00
ipt_ULOG.c
…
ipt_addrtype.c [IPV4]: inet_addr_type() annotations 2006-09-28 18:01:07 -07:00
ipt_ah.c
…
ipt_ecn.c
…
ipt_hashlimit.c [NETFILTER]: ipt annotations 2006-09-28 18:03:02 -07:00
ipt_iprange.c
…
ipt_owner.c
…
ipt_recent.c [NETFILTER]: ipt annotations 2006-09-28 18:03:02 -07:00
ipt_tos.c
…
ipt_ttl.c
…
iptable_filter.c
…
iptable_mangle.c [NETFILTER]: add type parameter to ip_route_me_harder 2006-10-04 00:30:54 -07:00
iptable_raw.c
…
nf_conntrack_l3proto_ipv4.c
…
nf_conntrack_proto_icmp.c
…