| commit | 848ef8555296f25d9226d3bc43ce4028835ed633 | |
| author | Jean Tourrilhes <jt@hpl.hp.com> | |
| Fri, 14 Apr 2006 17:47:26 +0000 (14 10:47 -0700) | ||
| committer | John W. Linville <linville@tuxdriver.com> | |
| Wed, 19 Apr 2006 21:25:41 +0000 (19 17:25 -0400) | ||
| tree | 3db10d298e8c4cfe005b719552ac378685ab5c1a | treesnapshot (tar.gz zip) |
| parent | a392149ee14d1631d8632060c1fc3082729f83c8 | commitdiff |
[PATCH] wext: Fix RtNetlink ENCODE security permissions
I've just realised that the RtNetlink code does not check the
permission for SIOCGIWENCODE and SIOCGIWENCODEEXT, which means that
any user can read the encryption keys. The fix is trivial and should
go in 2.6.17 alonside the two other patch I sent you last week.
Signed-off-by: Jean Tourrilhes <jt@hpl.hp.com>
Signed-off-by: John W. Linville <linville@tuxdriver.com>
I've just realised that the RtNetlink code does not check the
permission for SIOCGIWENCODE and SIOCGIWENCODEEXT, which means that
any user can read the encryption keys. The fix is trivial and should
go in 2.6.17 alonside the two other patch I sent you last week.
Signed-off-by: Jean Tourrilhes <jt@hpl.hp.com>
Signed-off-by: John W. Linville <linville@tuxdriver.com>
| net/core/wireless.c | diffblobblamehistory |