| commit | 3480c63bdf008e9289aab94418f43b9592978fff | [log] [tgz] |
|---|---|---|
| author | Patrick McHardy <kaber@trash.net> | Thu Mar 27 20:28:10 2008 -0700 |
| committer | David S. Miller <davem@davemloft.net> | Thu Mar 27 20:28:10 2008 -0700 |
| tree | 14a355d650dc467e105fe00bc62a3599e890bc50 | |
| parent | 349fb2d6492e7d644bc8e670ba11d764a3e2901b [diff] |
[LLC]: Restrict LLC sockets to root LLC currently allows users to inject raw frames, including IP packets encapsulated in SNAP. While Linux doesn't handle IP over SNAP, other systems do. Restrict LLC sockets to root similar to packet sockets. [ Modified Patrick's patch to use CAP_NEW_RAW --DaveM ] Signed-off-by: Patrick McHardy <kaber@trash.net> Signed-off-by: David S. Miller <davem@davemloft.net>