bpf: require CAP_NET_ADMIN when using sockmap maps
authorJohn Fastabend <john.fastabend@gmail.com>
Wed, 18 Oct 2017 14:11:22 +0000 (07:11 -0700)
committerDavid S. Miller <davem@davemloft.net>
Fri, 20 Oct 2017 12:01:29 +0000 (13:01 +0100)
commitfb50df8d32283cd95932a182a46a10070c4a8832
treeb04d6da4d4cf84e38de8b3b5ff344661598f8fdc
parentf7e9cb1ecb6d922584abff16db07930162c57155
bpf: require CAP_NET_ADMIN when using sockmap maps

Restrict sockmap to CAP_NET_ADMIN.

Signed-off-by: John Fastabend <john.fastabend@gmail.com>
Acked-by: Daniel Borkmann <daniel@iogearbox.net>
Acked-by: Alexei Starovoitov <ast@kernel.org>
Signed-off-by: David S. Miller <davem@davemloft.net>
kernel/bpf/sockmap.c