[Bug 754611] New: Netlink and raw packet inconsistencies or obsolete man pages?
https://bugzilla.novell.com/show_bug.cgi?id=754611
https://bugzilla.novell.com/show_bug.cgi?id=754611#c0
Summary: Netlink and raw packet inconsistencies or obsolete man
pages?
Classification: openSUSE
Product: openSUSE 12.1
Version: Final
Platform: All
OS/Version: openSUSE 12.1
Status: NEW
Severity: Normal
Priority: P5 - None
Component: Kernel
AssignedTo: kernel-maintainers@forge.provo.novell.com
ReportedBy: nt1277@gmail.com
QAContact: qa-bugs@suse.de
Found By: ---
Blocker: ---
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:10.0.2) Gecko/20100101
Firefox/10.0.2
man 7 netlink states that:
"Only processes with an effective UID of 0 or the CAP_NET_ADMIN capability may
send or listen to a netlink multicast group."
In addition man 7 capabilities states that:
"CAP_NET_RAW
Use RAW and PACKET sockets."
Despite these statements I was able to run the followinng code without getting
any access denied type error messages:
################################
#include
https://bugzilla.novell.com/show_bug.cgi?id=754611
https://bugzilla.novell.com/show_bug.cgi?id=754611#c1
Jeff Mahoney
https://bugzilla.novell.com/show_bug.cgi?id=754611
https://bugzilla.novell.com/show_bug.cgi?id=754611#c2
--- Comment #2 from Tamás Németh
Petr, can you add the following paragraph below the last paragraph in the "Address Groups" section? It should probably go upstream as well.
Some Linux kernel subsystems may additionally allow other users to send and/or receive messages. As of Linux 3.0, the NETLINK_KOBJECT_UEVENT, NETLINK_GENERIC, NETLINK_ROUTE, and NETLINK_SELINUX groups allow other users to receive messages. No groups allow other users to send messages.
I assume this is to be written into cap 7 netlink isn't it? But what about man 7 capabilities which suggests me that CAP_NET_RAW is necessary for creating a raw socket? Netlink seems to break that rule, too. BTW, thank you for looking at this bugreport! -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=754611
https://bugzilla.novell.com/show_bug.cgi?id=754611#c3
--- Comment #3 from Jeff Mahoney
https://bugzilla.novell.com/show_bug.cgi?id=754611
https://bugzilla.novell.com/show_bug.cgi?id=754611#c4
Petr Gajdos
https://bugzilla.novell.com/show_bug.cgi?id=754611
https://bugzilla.novell.com/show_bug.cgi?id=754611#c5
--- Comment #5 from Bernhard Wiedemann
participants (1)
-
bugzilla_noreply@novell.com