netfilter: xt_owner: Add supplementary groups option 48/209248/1
authorLukasz Pawelczyk <l.pawelczyk@samsung.com>
Fri, 10 May 2019 11:46:22 +0000 (13:46 +0200)
committerSeung-Woo Kim <sw0312.kim@samsung.com>
Thu, 4 Jul 2019 01:49:12 +0000 (10:49 +0900)
commit69a070c54920c6d05d20d037e51127df3dd42569
tree418a458ba07d88fb5f530dc61246716cd108caa5
parentbbfdec4e6db8c7d95cb5a370f393ad872bbd608a
netfilter: xt_owner: Add supplementary groups option

The XT_OWNER_SUPPL_GROUPS flag causes GIDs specified with XT_OWNER_GID
to be also checked in the supplementary groups of a process.

f_cred->group_info cannot be modified during its lifetime and f_cred
holds a reference to it so it's safe to use.

Signed-off-by: Lukasz Pawelczyk <l.pawelczyk@samsung.com>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
[sw0312.kim: backport from mainline to apply supplementary groups on netfilter]
Signed-off-by: Seung-Woo Kim <sw0312.kim@samsung.com>
Change-Id: I7b56e3ca91f0632cb995cc1039a46a06717c77f3
include/uapi/linux/netfilter/xt_owner.h
net/netfilter/xt_owner.c