]> git.proxmox.com Git - mirror_ubuntu-hirsute-kernel.git/commit
userns: nfnetlink_log: Report socket uids in the log sockets user namespace
authorEric W. Biederman <ebiederm@xmission.com>
Fri, 25 May 2012 16:42:54 +0000 (10:42 -0600)
committerEric W. Biederman <ebiederm@xmission.com>
Wed, 15 Aug 2012 04:55:27 +0000 (21:55 -0700)
commit9eea9515cb5f3a4416511ef54b1cc98ca04869a1
treebfbcf2b618a42a19128e75230529cd5d1ebf0167
parentd06ca9564350184a19b5aae9ac150f1b1306de29
userns: nfnetlink_log: Report socket uids in the log sockets user namespace

At logging instance creation capture the peer netlink socket's user
namespace. Use the captured peer user namespace when reporting socket
uids to the peer.

The peer socket's user namespace is guaranateed to be valid until the user
closes the netlink socket.  nfnetlink_log removes instances during the final
close of a socket.  __build_packet_message does not get called after an
instance is destroyed.   Therefore it is safe to let the peer netlink socket
take care of the user namespace reference counting for us.

Acked-by: David S. Miller <davem@davemloft.net>
Acked-by: Serge Hallyn <serge.hallyn@canonical.com>
Signed-off-by: Eric W. Biederman <ebiederm@xmission.com>
init/Kconfig
net/netfilter/nfnetlink_log.c