Commit 0614e2b7 authored by Ori Nimron's avatar Ori Nimron Committed by David S. Miller
Browse files

ax25: enforce CAP_NET_RAW for raw sockets 



When creating a raw AF_AX25 socket, CAP_NET_RAW needs to be checked
first.

Signed-off-by: default avatarOri Nimron <orinimron123@gmail.com>
Signed-off-by: default avatarGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Signed-off-by: default avatarDavid S. Miller <davem@davemloft.net>
parent 6cc03e8a

net/ax25/af_ax25.c

+2 −0
Original line number Diff line number Diff line
@@ -855,6 +855,8 @@ static int ax25_create(struct net *net, struct socket *sock, int protocol, 
		break;



	case SOCK_RAW:

		if (!capable(CAP_NET_RAW))

			return -EPERM;

		break;

	default:

		return -ESOCKTNOSUPPORT;