Thread (7 messages) 7 messages, 3 authors, 2016-09-14

Re: [PATCH net-next v3] net: inet: diag: expose the socket mark to privileged processes.

flat view

From: David Miller <davem@davemloft.net>
Date: 2016-09-08 23:13:57

From: Lorenzo Colitti <redacted>
Date: Thu,  8 Sep 2016 00:42:25 +0900
This adds the capability for a process that has CAP_NET_ADMIN on
a socket to see the socket mark in socket dumps.

Commit a52e95abf772 ("net: diag: allow socket bytecode filters to
match socket marks") recently gave privileged processes the
ability to filter socket dumps based on mark. This patch is
complementary: it ensures that the mark is also passed to
userspace in the socket's netlink attributes.  It is useful for
tools like ss which display information about sockets.

Tested: https://android-review.googlesource.com/270210
Signed-off-by: Lorenzo Colitti <redacted>
Applied, but the argument list of inet_sk_diag_fill is starting to get out
of control.
Keyboard shortcuts
hback out one level
jnext message in thread
kprevious message in thread
ldrill in
Escclose help / fold thread tree
?toggle this help