OSDN Git Service

netfilter: xt_qtaguid: recognize IPV6 interfaces. root is procfs privileged.
authorJP Abgrall <jpa@google.com>
Tue, 9 Aug 2011 18:53:11 +0000 (11:53 -0700)
committerJP Abgrall <jpa@google.com>
Wed, 10 Aug 2011 00:17:22 +0000 (17:17 -0700)
commitf3d9cdd92a341c10bf277a2b84403e7041519251
treecd53270b3ddf063ae02951e65c2f8e3f2b0bad37
parent468d36cafa570f69eecf63fa25939e82ae62e18b
netfilter: xt_qtaguid: recognize IPV6 interfaces. root is procfs privileged.

* Allow tracking interfaces that only have an ipv6 address.
  Deal with ipv6 notifier chains that do NETDEV_UP without the rtnl_lock()
* Allow root all access to procfs ctrl/stats.
  To disable all checks:
    echo 0 > /sys/module/xt_qtaguid/parameters/ctrl_write_gid
    echo 0 > /sys/module/xt_qtaguid/parameters/stats_readall_gid
* Add CDEBUG define to enable pr_debug output specific to
    procfs ctrl/stats access.

Change-Id: I9a469511d92fe42734daff6ea2326701312a161b
Signed-off-by: JP Abgrall <jpa@google.com>
net/netfilter/xt_qtaguid.c