{"push_id":585813059,"size":2,"distinct_size":2,"ref":"refs/heads/cm-12.0","head":"8d07690bc5d6b87857c1200df6d986db3f87fe3a","before":"1bdeb172c94d4550742effe145ecc1dc0603aaf3","commits":[{"sha":"7192ec0140832933849ac2ad8b88e624f5d44ac3","author":{"email":"707d14912bb250caf67dfe0ea4035681fbfc4f56@netfilter.org","name":"Pablo Neira Ayuso"},"message":"netlink: fix possible spoofing from non-root processes\n\nNon-root user-space processes can send Netlink messages to other\nprocesses that are well-known for being subscribed to Netlink\nasynchronous notifications. This allows ilegitimate non-root\nprocess to send forged messages to Netlink subscribers.\n\nThe userspace process usually verifies the legitimate origin in\ntwo ways:\n\na) Socket credentials. If UID != 0, then the message comes from\n   some ilegitimate process and the message needs to be dropped.\n\nb) Netlink portID. In general, portID == 0 means that the origin\n   of the messages comes from the kernel. Thus, discarding any\n   message not coming from the kernel.\n\nHowever, ctnetlink sets the portID in event messages that has\nbeen triggered by some user-space process, eg. conntrack utility.\nSo other processes subscribed to ctnetlink events, eg. conntrackd,\nknow that the event was triggered by some user-space action.\n\nNeither of the two ways to discard ilegitimate messages coming\nfrom non-root processes can help for ctnetlink.\n\nThis patch adds capability validation in case that dst_pid is set\nin netlink_sendmsg(). This approach is aggressive since existing\napplications using any Netlink bus to deliver messages between\ntwo user-space processes will break. Note that the exception is\nNETLINK_USERSOCK, since it is reserved for netlink-to-netlink\nuserspace communication.\n\nStill, if anyone wants that his Netlink bus allows netlink-to-netlink\nuserspace, then they can set NL_NONROOT_SEND. However, by default,\nI don't think it makes sense to allow to use NETLINK_ROUTE to\ncommunicate two processes that are sending no matter what information\nthat is not related to link/neighbouring/routing. They should be using\nNETLINK_USERSOCK instead for that.\n\nChange-Id: Ic81ff07f3a8a3f831deac84b1d884f0e58958909\nSigned-off-by: Pablo Neira Ayuso <pablo@netfilter.org>\nSigned-off-by: David S. Miller <davem@davemloft.net>","distinct":true,"url":"https://api.github.com/repos/sooti/android_kernel_lge_g3/commits/7192ec0140832933849ac2ad8b88e624f5d44ac3"},{"sha":"8d07690bc5d6b87857c1200df6d986db3f87fe3a","author":{"email":"f198f845de543296f589fa19589ab24472534a69","name":"sooti"},"message":"Merge https://github.com/CyanogenMod/android_kernel_lge_g3 into HEAD","distinct":true,"url":"https://api.github.com/repos/sooti/android_kernel_lge_g3/commits/8d07690bc5d6b87857c1200df6d986db3f87fe3a"}]}