lkml.org 
[lkml]   [2020]   [Sep]   [29]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
    Patch in this message
    /
    From
    Subject[PATCH 5.8 32/99] netfilter: nft_meta: use socket user_ns to retrieve skuid and skgid
    Date
    From: Pablo Neira Ayuso <pablo@netfilter.org>

    [ Upstream commit 0c92411bb81de9bc516d6924f50289d8d5f880e5 ]

    ... instead of using init_user_ns.

    Fixes: 96518518cc41 ("netfilter: add nftables")
    Tested-by: Phil Sutter <phil@nwl.cc>
    Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
    Signed-off-by: Sasha Levin <sashal@kernel.org>
    ---
    net/netfilter/nft_meta.c | 4 ++--
    1 file changed, 2 insertions(+), 2 deletions(-)

    diff --git a/net/netfilter/nft_meta.c b/net/netfilter/nft_meta.c
    index 7bc6537f3ccb5..b37bd02448d8c 100644
    --- a/net/netfilter/nft_meta.c
    +++ b/net/netfilter/nft_meta.c
    @@ -147,11 +147,11 @@ nft_meta_get_eval_skugid(enum nft_meta_keys key,

    switch (key) {
    case NFT_META_SKUID:
    - *dest = from_kuid_munged(&init_user_ns,
    + *dest = from_kuid_munged(sock_net(sk)->user_ns,
    sock->file->f_cred->fsuid);
    break;
    case NFT_META_SKGID:
    - *dest = from_kgid_munged(&init_user_ns,
    + *dest = from_kgid_munged(sock_net(sk)->user_ns,
    sock->file->f_cred->fsgid);
    break;
    default:
    --
    2.25.1


    \
     
     \ /
      Last update: 2020-09-29 13:54    [W:3.709 / U:0.168 seconds]
    ©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site