net-sysfs: require net admin in the init ns for setting tx_maxrate
authorTyler Hicks <tyhicks@canonical.com>
Fri, 20 Jul 2018 21:56:51 +0000 (21:56 +0000)
committerDavid S. Miller <davem@davemloft.net>
Sat, 21 Jul 2018 06:44:35 +0000 (23:44 -0700)
commit3033fced2f689d4a870b3ba6a8a676db1261d262
treea34ca7ad544097f8a999ccccde913e9edcc8fedd
parent9944e894c1266dc8515c82d1ff752d681215526b
net-sysfs: require net admin in the init ns for setting tx_maxrate

An upcoming change will allow container root to open some /sys/class/net
files for writing. The tx_maxrate attribute can result in changes
to actual hardware devices so err on the side of caution by requiring
CAP_NET_ADMIN in the init namespace in the corresponding attribute store
operation.

Signed-off-by: Tyler Hicks <tyhicks@canonical.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
net/core/net-sysfs.c