linux/net/psp
Jakub Kicinski b718342a7f net: psp: require admin permission for dev-set and key-rotate
The dev-set and key-rotate netlink operations modify shared device
state (PSP version configuration and cryptographic key material,
respectively) but do not require CAP_NET_ADMIN. The only access
control is psp_dev_check_access() which merely verifies netns
membership.

Fixes: 00c94ca2b9 ("psp: base PSP device support")
Reviewed-by: Daniel Zahka <daniel.zahka@gmail.com>
Reviewed-by: Willem de Bruijn <willemb@google.com>
Link: https://patch.msgid.link/20260427195856.401223-1-kuba@kernel.org
Signed-off-by: Jakub Kicinski <kuba@kernel.org>
2026-04-28 17:44:20 -07:00
..
Kconfig net: psp: select CONFIG_SKB_EXTENSIONS 2026-02-17 17:05:29 -08:00
Makefile net: psp: add socket security association code 2025-09-18 12:32:06 +02:00
psp_main.c net: fix off-by-one in udp_flow_src_port() / psp_write_headers() 2026-03-04 16:51:10 -08:00
psp_nl.c net: psp: check for device unregister when creating assoc 2026-04-28 17:43:32 -07:00
psp_sock.c net: remove EXPORT_IPV6_MOD() and EXPORT_IPV6_MOD_GPL() macros 2026-03-29 11:21:22 -07:00
psp-nl-gen.c net: psp: require admin permission for dev-set and key-rotate 2026-04-28 17:44:20 -07:00
psp-nl-gen.h tools: ynl-gen: add regeneration comment 2025-11-25 19:20:42 -08:00
psp.h psp: rename our psp_dev_destroy() 2025-09-18 07:04:25 -07:00