net: Enable a userns root rtnl calls that are safe for unprivilged users
authorEric W. Biederman <ebiederm@xmission.com>
Fri, 16 Nov 2012 03:03:11 +0000 (03:03 +0000)
committerDavid S. Miller <davem@davemloft.net>
Mon, 19 Nov 2012 01:33:36 +0000 (20:33 -0500)
commitb51642f6d77b131dc85d1d71029c3cbb5b07c262
tree0f3feb16dad1cd729dff368396ee90cd424797a1
parentc027aab4a6b1fe2541090ac04bee8ad246aeef70
net: Enable a userns root rtnl calls that are safe for unprivilged users

- Only allow moving network devices to network namespaces you have
  CAP_NET_ADMIN privileges over.

- Enable creating/deleting/modifying interfaces
- Enable adding/deleting addresses
- Enable adding/setting/deleting neighbour entries
- Enable adding/removing routes
- Enable adding/removing fib rules
- Enable setting the forwarding state
- Enable adding/removing ipv6 address labels
- Enable setting bridge parameter

Signed-off-by: "Eric W. Biederman" <ebiederm@xmission.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
net/bridge/br_netlink.c
net/core/fib_rules.c
net/core/neighbour.c
net/core/rtnetlink.c
net/ipv4/devinet.c
net/ipv4/fib_frontend.c
net/ipv6/addrconf.c
net/ipv6/addrlabel.c
net/ipv6/route.c