]> git.proxmox.com Git - mirror_ubuntu-bionic-kernel.git/commit - crypto/crypto_user.c
crypto: user - Allow CRYPTO_MSG_GETALG without CAP_NET_ADMIN
authorMatthias-Christian Ott <ott@mirix.org>
Thu, 8 May 2014 13:58:12 +0000 (21:58 +0800)
committerHerbert Xu <herbert@gondor.apana.org.au>
Thu, 8 May 2014 13:58:12 +0000 (21:58 +0800)
commitc568398aa05f852592d0e2b1dc893e6c5c14971c
tree222b91790ea0dee106e90a9fa22839d7e116bc1a
parentda37503d37bb6ae72cca0b4d729c153f04b9f0cc
crypto: user - Allow CRYPTO_MSG_GETALG without CAP_NET_ADMIN

CRYPTO_USER requires CAP_NET_ADMIN for all operations. Most information
provided by CRYPTO_MSG_GETALG is also accessible through /proc/modules
and AF_ALG. CRYPTO_MSG_GETALG should not require CAP_NET_ADMIN so that
processes without CAP_NET_ADMIN can use CRYPTO_MSG_GETALG to get cipher
details, such as cipher priorities, for AF_ALG.

Signed-off-by: Matthias-Christian Ott <ott@mirix.org>
Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
crypto/crypto_user.c