Skip to content
  1. Jan 17, 2013
    • Vincent Bernat's avatar
      sk-filter: Add ability to lock a socket filter program · d59577b6
      Vincent Bernat authored
      
      
      While a privileged program can open a raw socket, attach some
      restrictive filter and drop its privileges (or send the socket to an
      unprivileged program through some Unix socket), the filter can still
      be removed or modified by the unprivileged program. This commit adds a
      socket option to lock the filter (SO_LOCK_FILTER) preventing any
      modification of a socket filter program.
      
      This is similar to OpenBSD BIOCLOCK ioctl on bpf sockets, except even
      root is not allowed change/drop the filter.
      
      The state of the lock can be read with getsockopt(). No error is
      triggered if the state is not changed. -EPERM is returned when a user
      tries to remove the lock or to change/remove the filter while the lock
      is active. The check is done directly in sk_attach_filter() and
      sk_detach_filter() and does not affect only setsockopt() syscall.
      
      Signed-off-by: default avatarVincent Bernat <bernat@luffy.cx>
      Signed-off-by: default avatarDavid S. Miller <davem@davemloft.net>
      d59577b6
  2. Jan 03, 2013
    • Greg Kroah-Hartman's avatar
      MIPS: drivers: remove __dev* attributes. · 28eb0e46
      Greg Kroah-Hartman authored
      
      
      CONFIG_HOTPLUG is going away as an option.  As a result, the __dev*
      markings need to be removed.
      
      This change removes the use of __devinit, __devexit_p, __devinitdata,
      and __devexit from these drivers.
      
      Based on patches originally written by Bill Pemberton, but redone by me
      in order to handle some of the coding style issues better, by hand.
      
      Cc: Bill Pemberton <wfp5p@virginia.edu>
      Signed-off-by: default avatarGreg Kroah-Hartman <gregkh@linuxfoundation.org>
      28eb0e46
  3. Jan 02, 2013
    • Joshua Kinard's avatar
      MIPS: 64-bit: Fix build if !CONFIG_MODULES · 2f12fb20
      Joshua Kinard authored
      
      
      Fix build failure if building a monolithic kernel due to
      arch/mips/kernel/Kconfig selecting MODULES_USE_ELF_REL[A] without checking
      to see if MODULES is set or not.  This leads to 'struct module' not
      existing, which triggers a compile failure in arch/mips/kernel/module-rela.c
      when the compiler attempts to dereference me->name:
      
        CC      arch/mips/kernel/module-rela.o
      arch/mips/kernel/module-rela.c: In function ‘apply_r_mips_26_rela’:
      arch/mips/kernel/module-rela.c:38:74: error: dereferencing pointer to incomplete type
      arch/mips/kernel/module-rela.c:46:12: error: dereferencing pointer to incomplete type
      arch/mips/kernel/module-rela.c: In function ‘apply_relocate_add’:
      arch/mips/kernel/module-rela.c:133:13: error: dereferencing pointer to incomplete type
      make[2]: *** [arch/mips/kernel/module-rela.o] Error 1
      
      Signed-off-by: default avatarJoshua Kinard <kumba@gentoo.org>
      Cc: linux-mips@linux-mips.org
      Patchwork: https://patchwork.linux-mips.org/patch/4749/
      
      
      Signed-off-by: default avatarRalf Baechle <ralf@linux-mips.org>
      2f12fb20
  4. Dec 28, 2012
  5. Dec 27, 2012
  6. Dec 19, 2012
  7. Dec 13, 2012
Loading