Received: by 2002:a05:7412:8d09:b0:fa:4c10:6cad with SMTP id bj9csp372198rdb; Tue, 16 Jan 2024 03:05:12 -0800 (PST) X-Google-Smtp-Source: AGHT+IG4T5tvz4Bb5LQG4xo0rMkL3CBVNHFrp1/WidexX5sORojQ2k/Dwd6zZsTRQ9clOmKeZW9B X-Received: by 2002:a05:6870:3111:b0:206:9bc7:3d2c with SMTP id v17-20020a056870311100b002069bc73d2cmr10000417oaa.34.1705403112432; Tue, 16 Jan 2024 03:05:12 -0800 (PST) ARC-Seal: i=1; a=rsa-sha256; t=1705403112; cv=none; d=google.com; s=arc-20160816; b=w9/4Q2znnHzAhxv63lM1nc45b7H0b8UYcft/5wgSHFyzLuiQnPgNuRUsUAsCkcQxhD 0ZQvt+5sVN0K5jAsWR5aBqnRUkdy8VHThMpCmMwAlgkfmpHSChYLahmRt7VVbvm+MuPm Vpqiw0YURHqouI1uzkj75XumV9bsASV1iBwurvceGbmfbXp/1m8+bAVNkPbgNOnZVOg9 3XKm4hxiJEl+4NE2hORBqGXLX5ktbyOyqVRBAY7DIu3Xgx+HmVspn3a5lNxUDJOpxYxN OlhBtsz+A5VI/BRKYYe7w44RWO7pKXuStKTudY3AK/3EQYHUwM+LMz7NA0KHy1XQ8xjd E1sQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=content-transfer-encoding:mime-version:list-unsubscribe :list-subscribe:list-id:precedence:message-id:date:subject:cc:to :from:dkim-signature:dkim-signature:dkim-signature:dkim-signature; bh=TsvTliU/AduXv8+lyjjkHnFNXCRZ5gTEvS/YJHnYT4c=; fh=oFC7E9FDck8ASdDhsle893aOHpqlW9nZvEVneHDt4MY=; b=YAOy2Bsok75LTrtn7+sRwuypI+G0hgJvyGUqemKgYa8jfHQWnxYjiHCsfvt1SJnR1c fJ7258impAxOCSrCOGaC3+MCVmq4iPEAWyX2A+NugH3XH2u55NAFuHw3UA3aurhglAAF Rst9OPowuusffS5KG2I1E52LoHDWApASZTY1114XfBZSwdjbiIklYGYfwgsk5wX5muqO zOeIiG5V+IwDrp3R3i34gQvuPpBxLrLle4aQ6gXg0G27ZCJnI4LB0593xVo+9f3XQ6rE g26eppHWSevdWkc0MpUR8wHDfmr2FqB04aXH7cbzFwoEC6qfRioFbFZZUBvm4aBQMeuA SbKQ== ARC-Authentication-Results: i=1; mx.google.com; dkim=pass header.i=@suse.cz header.s=susede2_rsa header.b=jh8KHJD2; dkim=neutral (no key) header.i=@suse.cz header.s=susede2_ed25519; dkim=pass header.i=@suse.cz header.s=susede2_rsa header.b=jh8KHJD2; dkim=neutral (no key) header.i=@suse.cz header.s=susede2_ed25519; spf=pass (google.com: domain of linux-kernel+bounces-27288-linux.lists.archive=gmail.com@vger.kernel.org designates 2604:1380:40f1:3f00::1 as permitted sender) smtp.mailfrom="linux-kernel+bounces-27288-linux.lists.archive=gmail.com@vger.kernel.org" Return-Path: Received: from sy.mirrors.kernel.org (sy.mirrors.kernel.org. [2604:1380:40f1:3f00::1]) by mx.google.com with ESMTPS id k66-20020a633d45000000b00585a5e9a965si10983360pga.161.2024.01.16.03.05.11 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Tue, 16 Jan 2024 03:05:12 -0800 (PST) Received-SPF: pass (google.com: domain of linux-kernel+bounces-27288-linux.lists.archive=gmail.com@vger.kernel.org designates 2604:1380:40f1:3f00::1 as permitted sender) client-ip=2604:1380:40f1:3f00::1; Authentication-Results: mx.google.com; dkim=pass header.i=@suse.cz header.s=susede2_rsa header.b=jh8KHJD2; dkim=neutral (no key) header.i=@suse.cz header.s=susede2_ed25519; dkim=pass header.i=@suse.cz header.s=susede2_rsa header.b=jh8KHJD2; dkim=neutral (no key) header.i=@suse.cz header.s=susede2_ed25519; spf=pass (google.com: domain of linux-kernel+bounces-27288-linux.lists.archive=gmail.com@vger.kernel.org designates 2604:1380:40f1:3f00::1 as permitted sender) smtp.mailfrom="linux-kernel+bounces-27288-linux.lists.archive=gmail.com@vger.kernel.org" Received: from smtp.subspace.kernel.org (wormhole.subspace.kernel.org [52.25.139.140]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by sy.mirrors.kernel.org (Postfix) with ESMTPS id 78933B23090 for ; Tue, 16 Jan 2024 11:04:40 +0000 (UTC) Received: from localhost.localdomain (localhost.localdomain [127.0.0.1]) by smtp.subspace.kernel.org (Postfix) with ESMTP id E2B2E1A5A0; Tue, 16 Jan 2024 11:04:30 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; dkim=pass (1024-bit key) header.d=suse.cz header.i=@suse.cz header.b="jh8KHJD2"; dkim=permerror (0-bit key) header.d=suse.cz header.i=@suse.cz header.b="GA4WR0CZ"; dkim=pass (1024-bit key) header.d=suse.cz header.i=@suse.cz header.b="jh8KHJD2"; dkim=permerror (0-bit key) header.d=suse.cz header.i=@suse.cz header.b="GA4WR0CZ" Received: from smtp-out2.suse.de (smtp-out2.suse.de [195.135.223.131]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id 70B851A581; Tue, 16 Jan 2024 11:04:28 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; dmarc=none (p=none dis=none) header.from=suse.cz Authentication-Results: smtp.subspace.kernel.org; spf=pass smtp.mailfrom=suse.cz Received: from imap1.dmz-prg2.suse.org (imap1.dmz-prg2.suse.org [10.150.64.97]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (No client certificate requested) by smtp-out2.suse.de (Postfix) with ESMTPS id 98A4D1FB95; Tue, 16 Jan 2024 11:04:26 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=suse.cz; s=susede2_rsa; t=1705403066; h=from:from:reply-to:date:date:message-id:message-id:to:to:cc:cc: mime-version:mime-version: content-transfer-encoding:content-transfer-encoding; bh=TsvTliU/AduXv8+lyjjkHnFNXCRZ5gTEvS/YJHnYT4c=; b=jh8KHJD2XI9MNvwOKBGUV3u89KpaECwx+WHsbVQXnR+JIfp+stGXAiY4Ae3T/PehyN4fdt if0vMud4Wh4bU/5SDKD+Cb4UfyGDTc5kl4ps3YJEQqzPJSBvMfJsi+xuoPwGlLg8t/L5wK t7l1L0Cs2e0JX9sXf6pTOw0ozeSIH+o= DKIM-Signature: v=1; a=ed25519-sha256; c=relaxed/relaxed; d=suse.cz; s=susede2_ed25519; t=1705403066; h=from:from:reply-to:date:date:message-id:message-id:to:to:cc:cc: mime-version:mime-version: content-transfer-encoding:content-transfer-encoding; bh=TsvTliU/AduXv8+lyjjkHnFNXCRZ5gTEvS/YJHnYT4c=; b=GA4WR0CZZi+rJybJiMLoiP8UmdYjQ0ruP6PzcjWiLiql8N4mBmgQnyqll+JWMmeXxuCzoT wiqtKQPK62AIiHDQ== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=suse.cz; s=susede2_rsa; t=1705403066; h=from:from:reply-to:date:date:message-id:message-id:to:to:cc:cc: mime-version:mime-version: content-transfer-encoding:content-transfer-encoding; bh=TsvTliU/AduXv8+lyjjkHnFNXCRZ5gTEvS/YJHnYT4c=; b=jh8KHJD2XI9MNvwOKBGUV3u89KpaECwx+WHsbVQXnR+JIfp+stGXAiY4Ae3T/PehyN4fdt if0vMud4Wh4bU/5SDKD+Cb4UfyGDTc5kl4ps3YJEQqzPJSBvMfJsi+xuoPwGlLg8t/L5wK t7l1L0Cs2e0JX9sXf6pTOw0ozeSIH+o= DKIM-Signature: v=1; a=ed25519-sha256; c=relaxed/relaxed; d=suse.cz; s=susede2_ed25519; t=1705403066; h=from:from:reply-to:date:date:message-id:message-id:to:to:cc:cc: mime-version:mime-version: content-transfer-encoding:content-transfer-encoding; bh=TsvTliU/AduXv8+lyjjkHnFNXCRZ5gTEvS/YJHnYT4c=; b=GA4WR0CZZi+rJybJiMLoiP8UmdYjQ0ruP6PzcjWiLiql8N4mBmgQnyqll+JWMmeXxuCzoT wiqtKQPK62AIiHDQ== Received: from imap1.dmz-prg2.suse.org (localhost [127.0.0.1]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (No client certificate requested) by imap1.dmz-prg2.suse.org (Postfix) with ESMTPS id 274D4132FA; Tue, 16 Jan 2024 11:04:26 +0000 (UTC) Received: from dovecot-director2.suse.de ([10.150.64.162]) by imap1.dmz-prg2.suse.org with ESMTPSA id cYYzCLpipmUwMgAAD6G6ig (envelope-from ); Tue, 16 Jan 2024 11:04:26 +0000 From: Petr Vorel To: linux-man@vger.kernel.org Cc: Petr Vorel , =?UTF-8?q?Maciej=20=C5=BBenczykowski?= , Alejandro Colomar , linux-kernel@vger.kernel.org, linux-api@vger.kernel.org, Matthias Gerstner , Avinesh Kumar Subject: [PATCH 1/1] socket.7: Mention CAP_NET_RAW on SO_MARK Date: Tue, 16 Jan 2024 12:04:18 +0100 Message-ID: <20240116110418.2577798-1-pvorel@suse.cz> X-Mailer: git-send-email 2.43.0 Precedence: bulk X-Mailing-List: linux-kernel@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 Content-Transfer-Encoding: 8bit Authentication-Results: smtp-out2.suse.de; none X-Spam-Level: *** X-Spam-Score: 3.54 X-Spamd-Result: default: False [3.54 / 50.00]; ARC_NA(0.00)[]; RCVD_VIA_SMTP_AUTH(0.00)[]; FROM_HAS_DN(0.00)[]; TO_DN_SOME(0.00)[]; R_MISSING_CHARSET(2.50)[]; TO_MATCH_ENVRCPT_ALL(0.00)[]; MIME_GOOD(-0.10)[text/plain]; BROKEN_CONTENT_TYPE(1.50)[]; NEURAL_HAM_LONG(-1.00)[-0.999]; RCVD_COUNT_THREE(0.00)[3]; DKIM_SIGNED(0.00)[suse.cz:s=susede2_rsa,suse.cz:s=susede2_ed25519]; NEURAL_HAM_SHORT(-0.20)[-1.000]; RCPT_COUNT_SEVEN(0.00)[8]; MID_CONTAINS_FROM(1.00)[]; DBL_BLOCKED_OPENRESOLVER(0.00)[suse.cz:email]; FUZZY_BLOCKED(0.00)[rspamd.com]; FROM_EQ_ENVFROM(0.00)[]; MIME_TRACE(0.00)[0:+]; RCVD_TLS_ALL(0.00)[]; BAYES_HAM(-0.16)[69.49%] X-Spam-Flag: NO Added in 079925cce1d0 ("net: allow SO_MARK with CAP_NET_RAW") in v5.17. Signed-off-by: Petr Vorel --- man7/socket.7 | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/man7/socket.7 b/man7/socket.7 index 3ff8fe51b..3ebfc770b 100644 --- a/man7/socket.7 +++ b/man7/socket.7 @@ -614,7 +614,9 @@ Changing the mark can be used for mark-based routing without netfilter or for packet filtering. Setting this option requires the .B CAP_NET_ADMIN -capability. +or +.B CAP_NET_RAW +(since Linux 5.17) capability. .TP .B SO_OOBINLINE If this option is enabled, -- 2.43.0