Skip to content

Commit 506fa5d

Browse files
author
Justin Iurman
committed
Unprivileged CLT netlink calls
Remove the GENL_ADMIN_PERM flag from CLT netlink calls so that unprivileged users are able to execute them (e.g., easier for web servers). This is not a problem since these calls are not dangerous and literally do nothing if IOAM is not enabled (which must be done by a privileged user, so we're good).
1 parent 62caab2 commit 506fa5d

1 file changed

Lines changed: 2 additions & 2 deletions

File tree

CLT.patch

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -244,15 +244,15 @@ index 1098131ed90c..c9560a07acc4 100644
244244
+ .cmd = IOAM6_CMD_PKT_ID_ENABLE,
245245
+ .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
246246
+ .doit = ioam6_genl_pktid_enable,
247-
+ .flags = GENL_ADMIN_PERM,
247+
+ //.flags = GENL_ADMIN_PERM,
248248
+ .policy = ioam6_genl_policy_pktid_enable,
249249
+ .maxattr = ARRAY_SIZE(ioam6_genl_policy_pktid_enable) - 1,
250250
+ },
251251
+ {
252252
+ .cmd = IOAM6_CMD_PKT_ID_DISABLE,
253253
+ .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
254254
+ .doit = ioam6_genl_pktid_disable,
255-
+ .flags = GENL_ADMIN_PERM,
255+
+ //.flags = GENL_ADMIN_PERM,
256256
+ .policy = ioam6_genl_policy_pktid_disable,
257257
+ .maxattr = ARRAY_SIZE(ioam6_genl_policy_pktid_disable) - 1,
258258
+ },

0 commit comments

Comments
 (0)