You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

Jo-Philipp Wich 442db0d6d8 kernel: deny swconfig set requests for unprivileged users ... The swconfig kernel infrastructure fails to do any permissions checks when changing settings. As such an ordinary user account on a device with a switch can change switch settings without any special permissions. Routers generally have few non-admin users so this isn't a big hole, but it is a security hole. Likely the greatest danger is for multifunction devices which have a lot of extra daemons, compromising a low-security daemon would allow one to modify switch settings and cause the router/switch to appear to lock-up (or cause other sorts of troublesome nyetwork behavior). Implement a check for CAP_NET_ADMIN in swconfig_set_attr() and deny any requests originating from user contexts lacking this capability. Reported-by: Elliott Mitchell <ehem+openwrt@m5p.com> Signed-off-by: Jo-Philipp Wich <jo@mein.io>		8 years ago
..
base-files	…
files	kernel: deny swconfig set requests for unprivileged users	8 years ago
image	…
patches-3.18	…
patches-4.1	…
patches-4.4	…
PATCHES	…
config-3.18	…
config-4.1	…
config-4.4	kernel: add missing config symbols for 4.4	8 years ago