kernel_optimize_test/net
pageexec 4da62fc70d [IPVS]: Fix for overflows
From: <pageexec@freemail.hu>

$subject was fixed in 2.4 already, 2.6 needs it as well.

The impact of the bugs is a kernel stack overflow and privilege escalation
from CAP_NET_ADMIN via the IP_VS_SO_SET_STARTDAEMON/IP_VS_SO_GET_DAEMON
ioctls.  People running with 'root=all caps' (i.e., most users) are not
really affected (there's nothing to escalate), but SELinux and similar
users should take it seriously if they grant CAP_NET_ADMIN to other users.

Signed-off-by: Andrew Morton <akpm@osdl.org>
Signed-off-by: David S. Miller <davem@davemloft.net>
2005-06-26 16:00:19 -07:00
..
802 [TOKENRING]: net/802/tr.c: s/struct rif_cache_s/struct rif_cache/ 2005-05-26 12:59:42 -07:00
8021q
appletalk [ATALK] aarp: replace schedule_timeout() with msleep() 2005-06-22 22:11:44 -07:00
atm
ax25
bluetooth
bridge [EBTABLES]: vfree() checking cleanups 2005-06-22 22:12:57 -07:00
core [PKTGEN]: Fix random packet sizes causing panic 2005-06-26 15:27:10 -07:00
decnet [DECNET]: Remove unnecessary initilization of unused variable entries 2005-06-18 22:55:02 -07:00
econet
ethernet
ipv4 [IPVS]: Fix for overflows 2005-06-26 16:00:19 -07:00
ipv6 [TCP]: Allow choosing TCP congestion control via sockopt. 2005-06-23 20:37:36 -07:00
ipx
irda
key [IPSEC]: Add XFRM_STATE_NOPMTUDISC flag 2005-06-20 13:21:43 -07:00
lapb
llc
netlink [NETLINK]: Fix two socket hashing bugs. 2005-06-26 15:31:51 -07:00
netrom
packet
rose
rxrpc [PATCH] Cleanup patch for process freezing 2005-06-25 17:10:13 -07:00
sched [PKT_SCHED]: Make TEXTSEARCH* options only selected. 2005-06-24 17:39:03 -07:00
sctp [PATCH] make various thing static 2005-06-24 00:06:43 -07:00
sunrpc Merge Christoph's freeze cleanup patch 2005-06-25 17:16:53 -07:00
unix [AF_UNIX]: Use lookup_create(). 2005-05-19 12:26:43 -07:00
wanrouter
x25 [X25]: Fast select with no restriction on response 2005-06-22 22:16:17 -07:00
xfrm [IPSEC]: Add xfrm_state_afinfo->init_flags 2005-06-20 13:19:41 -07:00
compat.c
Kconfig
Makefile
nonet.c
socket.c [NET]: dont use strlen() but the result from a prior sprintf() 2005-06-22 14:32:51 -07:00
sysctl_net.c
TUNABLE