On Thu, Jun 11, 2015 at 3:22 PM, David Miller <[email protected]> wrote: > > From: Mahesh Bandewar <[email protected]> > Date: Wed, 10 Jun 2015 17:19:56 -0700 > > > Actor and Partner details can be accessed via proc-fs and sys-fs > > entries. These interfaces are world readable at this moment. The > > earlier patch-series made the LACP communication secure to avoid > > nuisance attack from within the same L2 domain but it did not > > prevent "someone unprivileged" looking at that information on host > > and perform the same act. > > > > This patch essentially avoids spitting those entries if the user > > in question does not have enough privileges. > > > > Signed-off-by: Mahesh Bandewar <[email protected]> > > I agree with Stephen Hemminger in that you should probably be using > CAP_NET_ADMIN here. Will change that into the next revision.
Thanks, --mahesh.. -- To unsubscribe from this list: send the line "unsubscribe netdev" in the body of a message to [email protected] More majordomo info at http://vger.kernel.org/majordomo-info.html
