Commit 0c92411b authored by Pablo Neira Ayuso's avatar Pablo Neira Ayuso
Browse files

netfilter: nft_meta: use socket user_ns to retrieve skuid and skgid 



... instead of using init_user_ns.

Fixes: 96518518 ("netfilter: add nftables")
Tested-by: default avatarPhil Sutter <phil@nwl.cc>
Signed-off-by: default avatarPablo Neira Ayuso <pablo@netfilter.org>
parent 526e81b9

net/netfilter/nft_meta.c

+2 −2
Original line number Diff line number Diff line
@@ -147,11 +147,11 @@ nft_meta_get_eval_skugid(enum nft_meta_keys key, 


	switch (key) {

	case NFT_META_SKUID:

		*dest = from_kuid_munged(&init_user_ns,

		*dest = from_kuid_munged(sock_net(sk)->user_ns,

					 sock->file->f_cred->fsuid);

		break;

	case NFT_META_SKGID:

		*dest =	from_kgid_munged(&init_user_ns,

		*dest =	from_kgid_munged(sock_net(sk)->user_ns,

					 sock->file->f_cred->fsgid);

		break;

	default: