linux/Documentation/netlink/specs
Jakub Kicinski b718342a7f net: psp: require admin permission for dev-set and key-rotate
The dev-set and key-rotate netlink operations modify shared device
state (PSP version configuration and cryptographic key material,
respectively) but do not require CAP_NET_ADMIN. The only access
control is psp_dev_check_access() which merely verifies netns
membership.

Fixes: 00c94ca2b9 ("psp: base PSP device support")
Reviewed-by: Daniel Zahka <daniel.zahka@gmail.com>
Reviewed-by: Willem de Bruijn <willemb@google.com>
Link: https://patch.msgid.link/20260427195856.401223-1-kuba@kernel.org
Signed-off-by: Jakub Kicinski <kuba@kernel.org>
2026-04-28 17:44:20 -07:00
..
binder.yaml netlink: specs: binder: replace underscores with dashes in names 2025-08-21 16:49:38 +02:00
conntrack.yaml ynl: fix schema check errors 2025-11-28 19:53:20 -08:00
dev-energymodel.yaml PM: EM: Add dump to get-perf-domains in the EM YNL spec 2026-01-09 21:44:46 +01:00
devlink.yaml devlink: Add resource scope filtering to resource dump 2026-04-08 19:55:39 -07:00
dpll.yaml dpll: add frequency monitoring to netlink spec 2026-04-03 16:48:01 -07:00
drm_ras.yaml drm/ras: Introduce the DRM RAS infrastructure over generic netlink 2026-03-05 19:38:55 -05:00
ethtool.yaml net: ethtool: add ethtool COALESCE_RX_CQE_FRAMES/NSECS 2026-03-18 20:01:10 -07:00
fou.yaml fou: Don't allow 0 for FOU_ATTR_IPPROTO. 2026-01-17 16:00:24 -08:00
handshake.yaml net/handshake: Add new parameter 'HANDSHAKE_A_ACCEPT_KEYRING' 2025-07-08 15:31:44 +02:00
index.rst docs: netlink: index.rst: add a netlink index file 2025-08-12 07:47:30 +02:00
lockd.yaml netlink: specs: clean up spaces in brackets 2025-06-11 14:01:19 -07:00
mptcp_pm.yaml mptcp: fix kdoc warnings 2026-02-06 20:35:06 -08:00
net_shaper.yaml net: shaper: protect from late creation of hierarchy 2026-03-19 13:47:15 +01:00
netdev.yaml net: Add queue-create operation 2026-04-09 18:21:45 -07:00
nfsd.yaml NFSD: Add a key for signing filehandles 2026-03-29 21:25:09 -04:00
nftables.yaml doc/netlink: nftables: Fill out operation attributes 2026-03-05 18:49:08 -08:00
nl80211.yaml netlink: specs: explicitly declare block scalar strings 2025-09-15 18:27:19 -07:00
nlctrl.yaml netlink: specs: clean up spaces in brackets 2025-06-11 14:01:19 -07:00
ovpn.yaml ovpn: add support for asymmetric peer IDs 2026-03-17 11:09:05 +01:00
ovs_datapath.yaml netlink: specs: explicitly declare block scalar strings 2025-09-15 18:27:19 -07:00
ovs_flow.yaml netlink: specs: explicitly declare block scalar strings 2025-09-15 18:27:19 -07:00
ovs_vport.yaml netlink: specs: explicitly declare block scalar strings 2025-09-15 18:27:19 -07:00
psp.yaml net: psp: require admin permission for dev-set and key-rotate 2026-04-28 17:44:20 -07:00
rt-addr.yaml netlink: specs: add big-endian byte-order for u32 IPv4 addresses 2025-11-26 17:14:17 -08:00
rt-link.yaml net: bridge: add stp_mode attribute for STP mode selection 2026-04-10 15:52:24 -07:00
rt-neigh.yaml netlink: specs: support ipv4-or-v6 for dual-stack fields 2025-11-18 18:42:10 -08:00
rt-route.yaml netlink: specs: support ipv4-or-v6 for dual-stack fields 2025-11-18 18:42:10 -08:00
rt-rule.yaml netlink: specs: support ipv4-or-v6 for dual-stack fields 2025-11-18 18:42:10 -08:00
tc.yaml net/sched: sch_cake: share shaper state across sub-instances of cake_mq 2026-01-13 11:54:29 +01:00
tcp_metrics.yaml netlink: specs: clean up spaces in brackets 2025-06-11 14:01:19 -07:00
team.yaml netlink: specs: team: avoid mangling multilines doc 2025-09-15 18:27:19 -07:00
wireguard.yaml wireguard: netlink: add YNL specification 2025-12-02 04:12:19 +01:00