Commit e69dbd46 authored by Ori Nimron's avatar Ori Nimron Committed by David S. Miller
Browse files

ieee802154: enforce CAP_NET_RAW for raw sockets 



When creating a raw AF_IEEE802154 socket, CAP_NET_RAW needs to be
checked first.

Signed-off-by: default avatarOri Nimron <orinimron123@gmail.com>
Signed-off-by: default avatarGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Acked-by: default avatarStefan Schmidt <stefan@datenfreihafen.org>
Signed-off-by: default avatarDavid S. Miller <davem@davemloft.net>
parent 0614e2b7

net/ieee802154/socket.c

+3 −0
Original line number Diff line number Diff line
@@ -1008,6 +1008,9 @@ static int ieee802154_create(struct net *net, struct socket *sock, 


	switch (sock->type) {

	case SOCK_RAW:

		rc = -EPERM;

		if (!capable(CAP_NET_RAW))

			goto out;

		proto = &ieee802154_raw_prot;

		ops = &ieee802154_raw_ops;

		break;