netfilter: xt_owner: Add supplementary groups option 04/209204/1
authorLukasz Pawelczyk <l.pawelczyk@samsung.com>
Fri, 10 May 2019 11:46:22 +0000 (13:46 +0200)
committerSeung-Woo Kim <sw0312.kim@samsung.com>
Wed, 3 Jul 2019 09:40:05 +0000 (18:40 +0900)
commit97f200a99f31b131b50f368ca123efadbcf81d09
treef02b4baf25bc616cd1512232b399a3cf1567c585
parentdd7ea5f0e22b8235d0f9f2c4eea5f03a44d044a7
netfilter: xt_owner: Add supplementary groups option

The XT_OWNER_SUPPL_GROUPS flag causes GIDs specified with XT_OWNER_GID
to be also checked in the supplementary groups of a process.

f_cred->group_info cannot be modified during its lifetime and f_cred
holds a reference to it so it's safe to use.

Signed-off-by: Lukasz Pawelczyk <l.pawelczyk@samsung.com>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
[sw0312.kim: backport from mainline to apply supplementary groups on netfilter]
Signed-off-by: Seung-Woo Kim <sw0312.kim@samsung.com>
Change-Id: Ib0e14affa03a612ea85dd409a2de00d7d2cbb061
include/uapi/linux/netfilter/xt_owner.h
net/netfilter/xt_owner.c