Jeff Vander Stoep af545bb5ee vsock: use ns_capable_noaudit() on socket create ... During __vsock_create() CAP_NET_ADMIN is used to determine if the vsock_sock->trusted should be set to true. This value is used later for determing if a remote connection should be allowed to connect to a restricted VM. Unfortunately, if the caller doesn't have CAP_NET_ADMIN, an audit message such as an selinux denial is generated even if the caller does not want a trusted socket. Logging errors on success is confusing. To avoid this, switch the capable(CAP_NET_ADMIN) check to the noaudit version. Reported-by: Roman Kiryanov <rkir@google.com> https://android-review.googlesource.com/c/device/generic/goldfish/+/1468545/ Signed-off-by: Jeff Vander Stoep <jeffv@google.com> Reviewed-by: James Morris <jamorris@linux.microsoft.com> Link: https://lore.kernel.org/r/20201023143757.377574-1-jeffv@google.com Signed-off-by: Jakub Kicinski <kuba@kernel.org>		2020-10-26 16:22:42 -07:00
..
6lowpan
9p	net: 9p: initialize sun_server.sun_path to have addr's value only when addr is valid	2020-10-12 10:05:47 +02:00
802
8021q	net: vlan: Fixed signedness in vlan_group_prealloc_vid()	2020-09-28 00:51:39 -07:00
appletalk
atm
ax25
batman-adv	genetlink: move to smaller ops wherever possible	2020-10-02 19:11:11 -07:00
bluetooth	Merge branch 'for-upstream' of git://git.kernel.org/pub/scm/linux/kernel/git/bluetooth/bluetooth-next	2020-09-29 13:22:53 -07:00
bpf	bpf: fix raw_tp test run in preempt kernel	2020-09-30 08:34:08 -07:00
bpfilter	Revert "bpfilter: Fix build error with CONFIG_BPFILTER_UMH"	2020-10-15 12:33:24 -07:00
bridge	netfilter: ebtables: Fixes dropping of small packets in bridge nat	2020-10-20 13:54:53 +02:00
caif
can	Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net	2020-10-15 12:43:21 -07:00
ceph	libceph: clear con->out_msg on Policy::stateful_server faults	2020-10-12 15:29:27 +02:00
core	net: Properly typecast int values to set sk_max_pacing_rate	2020-10-22 12:18:25 -07:00
dcb
dccp	inet: remove icsk_ack.blocked	2020-09-30 14:21:30 -07:00
decnet
dns_resolver
dsa	net: dsa: tag_ksz: KSZ8795 and KSZ9477 also use tail tags	2020-10-19 17:32:50 -07:00
ethernet
ethtool	ethtool: correct policy for ETHTOOL_MSG_CHANNELS_SET	2020-10-08 16:06:01 -07:00
hsr	genetlink: move to smaller ops wherever possible	2020-10-02 19:11:11 -07:00
ieee802154	genetlink: move to smaller ops wherever possible	2020-10-02 19:11:11 -07:00
ife
ipv4	tcp: Prevent low rmem stalls with SO_RCVLOWAT.	2020-10-23 19:11:20 -07:00
ipv6	netfilter: Drop fragmented ndisc packets assembled in netfilter	2020-10-20 13:54:53 +02:00
iucv	net/iucv: fix indentation in __iucv_message_receive()	2020-10-03 16:51:07 -07:00
kcm
key
l2tp	genetlink: move to smaller ops wherever possible	2020-10-02 19:11:11 -07:00
l3mdev
lapb
llc
mac80211	mac80211: use new function dev_fetch_sw_netstats	2020-10-13 17:33:49 -07:00
mac802154
mpls	mpls: load mpls_gso after mpls_iptunnel	2020-10-20 21:16:45 -07:00
mptcp	mptcp: depends on IPV6 but not as a module	2020-10-21 08:05:40 -07:00
ncsi	genetlink: move to smaller ops wherever possible	2020-10-02 19:11:11 -07:00
netfilter	netfilter: nf_fwd_netdev: clear timestamp in forwarding path	2020-10-22 14:49:36 +02:00
netlabel	genetlink: move to smaller ops wherever possible	2020-10-02 19:11:11 -07:00
netlink	netlink: export policy in extended ACK	2020-10-09 20:22:32 -07:00
netrom
nfc	nfc: Ensure presence of NFC_ATTR_FIRMWARE_NAME attribute in nfc_genl_fw_download()	2020-10-20 17:06:22 -07:00
nsh
openvswitch	net: openvswitch: fix to make sure flow_lookup() is not preempted	2020-10-18 12:29:36 -07:00
packet
phonet
psample	genetlink: move to smaller ops wherever possible	2020-10-02 19:11:11 -07:00
qrtr	net: qrtr: ns: Fix the incorrect usage of rcu_read_lock()	2020-10-06 06:01:35 -07:00
rds	net/rds: suppress page allocation failure error in recv buffer refill	2020-10-09 12:32:03 -07:00
rfkill
rose
rxrpc	rxrpc: Fix loss of final ack on shutdown	2020-10-15 13:28:00 +01:00
sched	net/sched: act_tunnel_key: fix OOB write in case of IPv6 ERSPAN tunnels	2020-10-20 21:10:41 -07:00
sctp	Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net	2020-10-08 15:44:50 -07:00
smc	Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net	2020-10-15 12:43:21 -07:00
strparser
sunrpc	The one new feature this time, from Anna Schumaker, is READ_PLUS, which	2020-10-22 09:44:27 -07:00
switchdev	net: switchdev: Fixed kerneldoc warning	2020-09-23 17:46:31 -07:00
tipc	tipc: fix incorrect setting window for bcast link	2020-10-16 14:09:12 -07:00
tls	Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net	2020-10-15 12:43:21 -07:00
unix	networking changes for the 5.10 merge window	2020-10-15 18:42:13 -07:00
vmw_vsock	vsock: use ns_capable_noaudit() on socket create	2020-10-26 16:22:42 -07:00
wimax	genetlink: move to smaller ops wherever possible	2020-10-02 19:11:11 -07:00
wireless	A handful of changes:	2020-10-10 09:12:52 -07:00
x25
xdp	Merge git://git.kernel.org/pub/scm/linux/kernel/git/bpf/bpf-next	2020-10-12 16:16:50 -07:00
xfrm	xfrm: use new function dev_fetch_sw_netstats	2020-10-13 17:33:49 -07:00
compat.c	iov_iter: transparently handle compat iovecs in import_iovec	2020-10-03 00:02:13 -04:00
devres.c
Kconfig	drop_monitor: Convert to using devlink tracepoint	2020-09-30 18:01:26 -07:00
Makefile
socket.c	Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net	2020-10-05 18:40:01 -07:00
sysctl_net.c