Repository files (latest commit first)

Filename	Latest commit message	Latest commit date
Jonathon Reinhart 9884f74510 net: Only allow init netns to set default tcp cong to a restricted algo ... commit 8d432592f30fcc34ef5a10aac4887b4897884493 upstream. tcp_set_default_congestion_control() is netns-safe in that it writes to &net->ipv4.tcp_congestion_control, but it also sets ca->flags |= TCP_CONG_NON_RESTRICTED which is not namespaced. This has the unintended side-effect of changing the global net.ipv4.tcp_allowed_congestion_control sysctl, despite the fact that it is read-only: 97684f0970f6 ("net: Make tcp_allowed_congestion_control readonly in non-init netns") Resolve this netns "leak" by only allowing the init netns to set the default algorithm to one that is restricted. This restriction could be removed if tcp_allowed_congestion_control were namespace-ified in the future. This bug was uncovered with https://github.com/JonathonReinhart/linux-netns-sysctl-verify Fixes: 6670e15244 ("tcp: Namespace-ify sysctl_tcp_default_congestion_control") Signed-off-by: Jonathon Reinhart <jonathon.reinhart@gmail.com> Signed-off-by: David S. Miller <davem@davemloft.net> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>		2021-05-14 09:44:33 +02:00
..
bpfilter
netfilter	netfilter: arp_tables: add pre_exit hook for table unregister	2021-04-21 12:56:16 +02:00
af_inet.c
ah4.c
arp.c	Exempt multicast addresses from five-second neighbor lifetime	2020-11-24 13:28:56 +01:00
cipso_ipv4.c	cipso,calipso: resolve a number of problems with the DOI refcounts	2021-03-17 17:03:35 +01:00
datagram.c
devinet.c	devinet: fix memleak in inetdev_init()	2020-06-10 20:24:54 +02:00
esp4.c	esp: avoid unneeded kmap_atomic call	2021-01-23 15:57:58 +01:00
esp4_offload.c	esp: delete NETIF_F_SCTP_CRC bit from features for esp offload	2021-04-14 08:24:13 +02:00
fib_frontend.c	ipv4: Ignore ECN bits for fib lookups in fib_compute_spec_dst()	2021-01-12 20:16:14 +01:00
fib_lookup.h
fib_notifier.c
fib_rules.c
fib_semantics.c	net: Fix the arp error in some cases	2020-06-30 15:36:44 -04:00
fib_trie.c	ipv4: Silence suspicious RCU usage warning	2020-09-12 14:18:54 +02:00
fou.c
gre_demux.c	erspan: fix version 1 check in gre_parse_header()	2021-01-12 20:16:15 +01:00
gre_offload.c	net: gre: recompute gre csum for sctp over gre tunnels	2020-08-11 15:33:40 +02:00
icmp.c	net: icmp: pass zeroed opts from icmp{,v6}_ndo_send before sending	2021-03-04 10:26:53 +01:00
igmp.c
inet_connection_sock.c	tcp: relookup sock for RST+ACK packets handled by obsolete req sock	2021-03-30 14:35:26 +02:00
inet_diag.c	inet_diag: Fix error path to cancel the meseage in inet_req_diag_fill()	2020-11-24 13:28:56 +01:00
inet_fragment.c
inet_hashtables.c	net: initialize fastreuse on inet_inherit_port	2020-08-19 08:16:23 +02:00
inet_timewait_sock.c
inetpeer.c
ip_forward.c
ip_fragment.c
ip_gre.c	ip_gre: set dev->hard_header_len and dev->needed_headroom properly	2020-10-29 09:58:04 +01:00
ip_input.c
ip_options.c
ip_output.c	net: ip: always refragment ip defragmented packets	2021-01-17 14:05:32 +01:00
ip_sockglue.c
ip_tunnel.c	net: ip_tunnel: fix mtu calculation	2021-02-10 09:25:32 +01:00
ip_tunnel_core.c
ip_vti.c	ip_vti: receive ipip packet by calling ip_tunnel_rcv	2020-06-03 08:21:34 +02:00
ipcomp.c
ipconfig.c
ipip.c	net: ipip: fix wrong address family in init error path	2020-06-03 08:20:52 +02:00
ipmr.c	net: don't return invalid table id error when we fall back to PF_UNSPEC	2020-06-03 08:20:41 +02:00
ipmr_base.c
Kconfig	vti[6]: fix packet tx through bpf_redirect() in XinY cases	2020-04-01 11:02:05 +02:00
Makefile
metrics.c
netfilter.c	netfilter: use actual socket sk rather than skb sk when routing harder	2020-11-18 19:20:17 +01:00
netlink.c
nexthop.c	nexthop: Do not flush blackhole nexthops when loopback goes down	2021-03-17 17:03:35 +01:00
ping.c	ipv4: fill fl4_icmp_{type,code} in ping_v4_sendmsg	2020-07-22 09:32:47 +02:00
proc.c
protocol.c
raw.c
raw_diag.c
route.c	inet: use bigger hash table for IP ID generation	2021-05-14 09:44:26 +02:00
syncookies.c	net: Update window_clamp if SOCK_RCVBUF is set	2020-11-18 19:20:32 +01:00
sysctl_net_ipv4.c	tcp: correct read of TFO keys on big endian systems	2020-08-19 08:16:23 +02:00
tcp.c	tcp: add sanity tests to TCP_QUEUE_SEQ	2021-03-17 17:03:32 +01:00
tcp_bbr.c	tcp: only postpone PROBE_RTT if RTT is < current min_rtt estimate	2020-11-24 13:28:59 +01:00
tcp_bic.c
tcp_bpf.c	bpf, sockmap: Ensure SO_RCVBUF memory is observed on ingress redirect	2020-11-24 13:29:08 +01:00
tcp_cdg.c
tcp_cong.c	net: Only allow init netns to set default tcp cong to a restricted algo	2021-05-14 09:44:33 +02:00
tcp_cubic.c	tcp_cubic: fix spurious HYSTART_DELAY exit upon drop in min RTT	2020-06-30 15:36:47 -04:00
tcp_dctcp.c
tcp_dctcp.h
tcp_diag.c
tcp_fastopen.c	tcp: correct read of TFO keys on big endian systems	2020-08-19 08:16:23 +02:00
tcp_highspeed.c
tcp_htcp.c
tcp_hybla.c
tcp_illinois.c
tcp_input.c	tcp: make TCP_USER_TIMEOUT accurate for zero window probes	2021-02-07 15:35:47 +01:00
tcp_ipv4.c	tcp: do not mess with cloned skbs in tcp_add_backlog()	2021-01-27 11:47:55 +01:00
tcp_lp.c
tcp_metrics.c
tcp_minisocks.c	tcp: relookup sock for RST+ACK packets handled by obsolete req sock	2021-03-30 14:35:26 +02:00
tcp_nv.c
tcp_offload.c
tcp_output.c	tcp: make TCP_USER_TIMEOUT accurate for zero window probes	2021-02-07 15:35:47 +01:00
tcp_rate.c
tcp_recovery.c	tcp: fix TLP timer not set when CA_STATE changes from DISORDER to OPEN	2021-02-03 23:26:02 +01:00
tcp_scalable.c
tcp_timer.c	tcp: make TCP_USER_TIMEOUT accurate for zero window probes	2021-02-07 15:35:47 +01:00
tcp_ulp.c
tcp_vegas.c
tcp_vegas.h
tcp_veno.c
tcp_westwood.c
tcp_yeah.c
tunnel4.c
udp.c	net: udp: Add support for getsockopt(..., ..., UDP_GRO, ..., ...);	2021-04-14 08:24:16 +02:00
udp_diag.c
udp_impl.h
udp_offload.c	net: Fix gro aggregation for udp encaps with zero csum	2021-03-17 17:03:30 +01:00
udp_tunnel.c
udplite.c
xfrm4_input.c
xfrm4_output.c	xfrm: Always set XFRM_TRANSFORMED in xfrm{4,6}_output_finish	2020-04-29 16:33:11 +02:00
xfrm4_policy.c
xfrm4_protocol.c
xfrm4_state.c
xfrm4_tunnel.c