linux/drivers/staging/comedi
Eric Paris a8f80e8ff9 Networking: use CAP_NET_ADMIN when deciding to call request_module
The networking code checks CAP_SYS_MODULE before using request_module() to
try to load a kernel module.  While this seems reasonable it's actually
weakening system security since we have to allow CAP_SYS_MODULE for things
like /sbin/ip and bluetoothd which need to be able to trigger module loads.
CAP_SYS_MODULE actually grants those binaries the ability to directly load
any code into the kernel.  We should instead be protecting modprobe and the
modules on disk, rather than granting random programs the ability to load code
directly into the kernel.  Instead we are going to gate those networking checks
on CAP_NET_ADMIN which still limits them to root but which does not grant
those processes the ability to load arbitrary code into the kernel.

Signed-off-by: Eric Paris <eparis@redhat.com>
Acked-by: Serge Hallyn <serue@us.ibm.com>
Acked-by: Paul Moore <paul.moore@hp.com>
Acked-by: David S. Miller <davem@davemloft.net>
Signed-off-by: James Morris <jmorris@namei.org>
2009-08-14 11:18:34 +10:00
..
drivers Staging: comedi: s626: use subvendor:subdevice ids for SAA7146 board 2009-07-12 13:21:45 -07:00
kcomedilib Staging: comedi: data.c should include delay.h 2009-06-19 11:00:34 -07:00
comedi.h Staging: comedi: remove some RT code that lingered 2009-06-19 11:00:33 -07:00
comedi_compat32.c Staging: comedi: fix 64bit build errors 2009-04-03 14:54:18 -07:00
comedi_compat32.h
comedi_fops.c Networking: use CAP_NET_ADMIN when deciding to call request_module 2009-08-14 11:18:34 +10:00
comedi_fops.h Staging: comedi: Add a module parameter 'comedi_autoconfig'. 2009-04-03 14:53:51 -07:00
comedi_ksyms.c Staging: comedi: remove RT code 2009-06-19 11:00:33 -07:00
comedidev.h Staging: comedi: fix build errors 2009-06-19 11:04:32 -07:00
comedilib.h Staging: comedi: Remove comedi_krange typedef 2009-04-03 14:53:58 -07:00
drivers.c Staging: comedi: remove comedi-specific wrappers 2009-06-19 11:00:33 -07:00
Kconfig staging: comedi: fix pcmcia build breakage 2009-06-19 11:00:34 -07:00
Makefile Staging: comedi: remove RT code 2009-06-19 11:00:33 -07:00
pci_ids.h Staging: comedi: Convert C99 style comments to traditional style comments 2009-04-03 14:53:53 -07:00
proc.c Staging: comedi: Remove comedi_driver typedef 2009-04-03 14:53:56 -07:00
range.c Staging: comedi: remove comedi-specific wrappers 2009-06-19 11:00:33 -07:00
TODO Staging: comedi: David doesn't want to get comedi patches 2009-05-08 19:39:28 -07:00
wrapper.h