Alexey Gladkov a2a5eb6323 proc: subset=pid: Show /proc/self/net only for CAP_NET_ADMIN ...

Cache the mounters credentials and allow access to the net directories
contingent of the permissions of the mounter of proc.

Do not show /proc/self/net when proc is mounted with subset=pid option
and the mounter does not have CAP_NET_ADMIN. To avoid inadvertently
allowing access to /proc/<pid>/net, updating mounter credentials is not
supported.

Signed-off-by: Alexey Gladkov <legion@kernel.org>
Link: https://patch.msgid.link/d2466fe9085367f1e24693c437ecb8cff2789660.1777278334.git.legion@kernel.org
Reviewed-by: Aleksa Sarai <aleksa@amutable.com>
Signed-off-by: Christian Brauner <brauner@kernel.org>

2026-05-11 23:13:01 +02:00

..

array.c

proc: array: drop stale FIXME about RCU in task_sig()

2026-03-27 21:19:32 -07:00

base.c

Merge tag 'vfs-7.1-rc1.misc' of git://git.kernel.org/pub/scm/linux/kernel/git/vfs/vfs

2026-04-13 14:20:11 -07:00

bootconfig.c

fs/proc: Skip bootloader comment if no embedded kernel parameters

2024-04-09 23:36:18 +09:00

cmdline.c

proc: mark /proc/cmdline as permanent

2023-02-02 22:50:02 -08:00

consoles.c

proc: Add nbcon support for /proc/consoles

2024-09-04 15:56:33 +02:00

cpuinfo.c

x86/aperfmperf: Replace aperfmperf_get_khz()

2022-04-27 20:22:19 +02:00

devices.c

proc: mark more files as permanent

2022-10-03 14:21:45 -07:00

fd.c

Merge tag 'vfs-7.1-rc1.misc' of git://git.kernel.org/pub/scm/linux/kernel/git/vfs/vfs

2026-04-13 14:20:11 -07:00

fd.h

fs: port ->permission() to pass mnt_idmap

2023-01-19 09:24:28 +01:00

generic.c

proc: allow to mark /proc files permanent outside of fs/proc/

2026-05-11 23:13:01 +02:00

inode.c

fs/proc: replace "__auto_type" with "const auto"

2025-12-08 15:32:15 -08:00

internal.h

proc: allow to mark /proc files permanent outside of fs/proc/

2026-05-11 23:13:01 +02:00

interrupts.c

fs/procfs: Switch to irq_get_nr_irqs()

2024-10-16 21:56:59 +02:00

Kconfig

virtio-mem: support CONFIG_PROC_VMCORE_DEVICE_RAM

2025-01-27 09:39:25 -05:00

kcore.c

Convert 'alloc_obj' family to use the new default GFP_KERNEL argument

2026-02-21 17:09:51 -08:00

kmsg.c

Merge tag 'printk-for-6.1' of git://git.kernel.org/pub/scm/linux/kernel/git/printk/linux

2022-10-10 11:24:19 -07:00

loadavg.c

proc: mark more files as permanent

2022-10-03 14:21:45 -07:00

Makefile

kbuild: make -Woverride-init warnings more consistent

2024-03-31 11:32:26 +09:00

meminfo.c

Merge tag 'mm-stable-2026-04-13-21-45' of git://git.kernel.org/pub/scm/linux/kernel/git/akpm/mm

2026-04-15 12:59:16 -07:00

namespaces.c

proc: rename proc_setattr to proc_nochmod_setattr

2026-03-26 15:16:54 +01:00

nommu.c

fs: create helper file_user_path() for user displayed mapped file path

2023-10-19 11:03:15 +02:00

page.c

fs/proc/page: remove unused KPMBITS

2025-11-20 14:03:42 -08:00

proc_net.c

proc: subset=pid: Show /proc/self/net only for CAP_NET_ADMIN

2026-05-11 23:13:01 +02:00

proc_sysctl.c

Merge tag 'pull-dcache' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs

2025-07-28 09:17:57 -07:00

proc_tty.c

proc: delete unused <linux/uaccess.h> includes

2022-07-17 17:31:39 -07:00

root.c

proc: subset=pid: Show /proc/self/net only for CAP_NET_ADMIN

2026-05-11 23:13:01 +02:00

self.c

fs/proc: Don't lock root inode when creating "self" and "thread-self"

2026-03-06 10:24:11 +01:00

softirqs.c

proc/softirqs: replace seq_printf with seq_put_decimal_ull_width

2024-11-07 07:40:14 -10:00

stat.c

fs/procfs: Switch to irq_get_nr_irqs()

2024-10-16 21:56:59 +02:00

task_mmu.c

treewide: change inode->i_ino from unsigned long to u64

2026-03-06 14:31:28 +01:00

task_nommu.c

fs/proc/task_mmu: factor out proc_maps_private fields used by PROCMAP_QUERY

2025-09-13 16:54:48 -07:00

thread_self.c

fs/proc: Don't lock root inode when creating "self" and "thread-self"

2026-03-06 10:24:11 +01:00

uptime.c

proc: mark more files as permanent

2022-10-03 14:21:45 -07:00

util.c

fs/proc/util.c: include fs/proc/internal.h for name_to_int()

2019-01-04 13:13:45 -08:00

version.c

proc: mark more files as permanent

2022-10-03 14:21:45 -07:00

vmcore.c

mm: rename my_zero_pfn() to zero_pfn()

2026-04-05 13:53:01 -07:00