rtnetlink: add restricted rtnl groups for ipv4 and ipv6 mroute
authorJulien Gomes <julien@arista.com>
Tue, 20 Jun 2017 20:54:16 +0000 (13:54 -0700)
committerDavid S. Miller <davem@davemloft.net>
Wed, 21 Jun 2017 15:22:52 +0000 (11:22 -0400)
commit5f729eaabef9308cfaa4b27c9b3f120253eff79b
treed50fbf36c771f509c2aa915a20f09e0c143f2598
parent94df30a6521becea7fda16f2c12ff9a01cac1da7
rtnetlink: add restricted rtnl groups for ipv4 and ipv6 mroute

Add RTNLGRP_{IPV4,IPV6}_MROUTE_R as two new restricted groups for the
NETLINK_ROUTE family.
Binding to these groups specifically requires CAP_NET_ADMIN to allow
multicast of sensitive messages (e.g. mroute cache reports).

Suggested-by: Nikolay Aleksandrov <nikolay@cumulusnetworks.com>
Signed-off-by: Julien Gomes <julien@arista.com>
Signed-off-by: Nikolay Aleksandrov <nikolay@cumulusnetworks.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
include/uapi/linux/rtnetlink.h
net/core/rtnetlink.c