Jakub Kicinski b718342a7f net: psp: require admin permission for dev-set and key-rotate ...

The dev-set and key-rotate netlink operations modify shared device
state (PSP version configuration and cryptographic key material,
respectively) but do not require CAP_NET_ADMIN. The only access
control is psp_dev_check_access() which merely verifies netns
membership.

Fixes: 00c94ca2b9 ("psp: base PSP device support")
Reviewed-by: Daniel Zahka <daniel.zahka@gmail.com>
Reviewed-by: Willem de Bruijn <willemb@google.com>
Link: https://patch.msgid.link/20260427195856.401223-1-kuba@kernel.org
Signed-off-by: Jakub Kicinski <kuba@kernel.org>

2026-04-28 17:44:20 -07:00

..

specs

net: psp: require admin permission for dev-set and key-rotate

2026-04-28 17:44:20 -07:00

genetlink-c.yaml

netlink: specs: support ipv4-or-v6 for dual-stack fields

2025-11-18 18:42:10 -08:00

genetlink-legacy.yaml

tools: ynl: add ipv4-or-v6 display hint

2025-09-16 08:16:57 -07:00

genetlink.yaml

tools: ynl: add uns-admin-perm to genetlink

2026-03-05 19:07:03 -08:00

netlink-raw.yaml

doc/netlink: netlink-raw: Add max check

2026-03-05 18:49:08 -08:00