Received: by 2002:a25:ad19:0:0:0:0:0 with SMTP id y25csp3618554ybi; Mon, 29 Jul 2019 09:34:41 -0700 (PDT) X-Google-Smtp-Source: APXvYqyoDSuNtQFjvhwQ1GWniuEEijsyLOlrknjIGDcxw6GcZb3YmJyu56Fy/ViQbhavotHnEc7h X-Received: by 2002:a63:2b84:: with SMTP id r126mr61632942pgr.308.1564418081129; Mon, 29 Jul 2019 09:34:41 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1564418081; cv=none; d=google.com; s=arc-20160816; b=x31H/QRXNFJW0qCeSVRJe1fXsDkMmNeQ94o8NCItjxNSzIzDhcnp5NiKEoODmlqLCY TNd8uxoBaR91EqvJOMN+JnTNgBjGi//anwHwwFEDw75suf9jJ4PI/ydirQPmoSIaJBEs 8HqoCXJc+SN23eeYJAhIUglYP0iJQt24qEx8RVXOFhq/QUNlRUreR/C61W5Hp8J/lwSb +kobPV8t7SIPhzWyqFmdU1z2wWkM7OgF7U5abgxGJLlRu5Rx0rJvg77gTezjgdWQ59Yd 0VLntN1MThkNfwbwXWMbIorafOVMXbOejN4sVP8DDMA6acwWaimqioxbS3BKkO+jzjzr sddw== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=list-id:precedence:sender:content-transfer-encoding :content-language:in-reply-to:mime-version:user-agent:date :message-id:from:references:to:subject:dkim-signature; bh=xV8S5dvH5X/iyMsitX1Lh7DBtL7ErfNc/D2854bEdkQ=; b=SMHPrJ6ZU6XzpY9jg00HivPzWRzOqFrhSERwo18muBWvYQObiHEBJrDyRo444UgbFS wsoaXc7oexV99kMcluyJA/Z0b6K5Gl0Qts8y0T0J3V7xZlOs0lmPQo01XYRZp5GraCGy qENAB/7Fiae8IycWRQhn9JSufIzDuL/IlVYKTIMW8UTzSYaiyM3UpMplYYp/cT6CpQ24 RvkCtL2PxkRthCHh2GDFWRy5rSkMEO5DpAFiH4+UcUardonUcr43z+UbkAbelSzCcwnD LFDwTvpsCWjc3vyVAJKi/lTm+3Q11f+Ttx/NuWxxWPc/L0G5fAe04rwL200tezf+PHc5 MjKg== ARC-Authentication-Results: i=1; mx.google.com; dkim=pass header.i=@gmail.com header.s=20161025 header.b="Vc/JBXKV"; spf=pass (google.com: best guess record for domain of linux-wireless-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) smtp.mailfrom=linux-wireless-owner@vger.kernel.org; dmarc=pass (p=NONE sp=QUARANTINE dis=NONE) header.from=gmail.com Return-Path: Received: from vger.kernel.org (vger.kernel.org. [209.132.180.67]) by mx.google.com with ESMTP id k11si26972192pfi.3.2019.07.29.09.34.26; Mon, 29 Jul 2019 09:34:41 -0700 (PDT) Received-SPF: pass (google.com: best guess record for domain of linux-wireless-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) client-ip=209.132.180.67; Authentication-Results: mx.google.com; dkim=pass header.i=@gmail.com header.s=20161025 header.b="Vc/JBXKV"; spf=pass (google.com: best guess record for domain of linux-wireless-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) smtp.mailfrom=linux-wireless-owner@vger.kernel.org; dmarc=pass (p=NONE sp=QUARANTINE dis=NONE) header.from=gmail.com Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S2387946AbfG2Plh (ORCPT + 99 others); Mon, 29 Jul 2019 11:41:37 -0400 Received: from mail-lf1-f66.google.com ([209.85.167.66]:38600 "EHLO mail-lf1-f66.google.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S2387467AbfG2Plh (ORCPT ); Mon, 29 Jul 2019 11:41:37 -0400 Received: by mail-lf1-f66.google.com with SMTP id h28so42349362lfj.5 for ; Mon, 29 Jul 2019 08:41:35 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=subject:to:references:from:message-id:date:user-agent:mime-version :in-reply-to:content-language:content-transfer-encoding; bh=xV8S5dvH5X/iyMsitX1Lh7DBtL7ErfNc/D2854bEdkQ=; b=Vc/JBXKViMKy0zLHNPoq09elmCVFk6pcc1TOlA39i5qQ0ibFPNw4mtbvPiUXqh9aav n80TklzV1EbwCN+AdgynmOK/1LDt8BBK4zc6mjAwvdmGEENi66Dpiz/tT7sBs/MkP5Xa aLWf4Iwogp27Xsjg9ZjBpCLcdYE8HsSnggd2pn/aNxD6C08QKDp5ZDTHaBQWUEzxSr09 yqqzZCdcsmgJ2Ma+KkEGTkafE7aHUK+aEUweDC55m9NF2xEYmutkuW2v9qf52LmX05nU kxWMB53JQd8zvRqizDZ8wvvMW2guCciPEJ9vk7Vu512PcysQo1lTdLgKn4933PDbqRNt In3g== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:subject:to:references:from:message-id:date :user-agent:mime-version:in-reply-to:content-language :content-transfer-encoding; bh=xV8S5dvH5X/iyMsitX1Lh7DBtL7ErfNc/D2854bEdkQ=; b=nfLtoo+eCNNJikDVmxPZuc9UiC+6C5BcwH31vN35oeudMvzhGE/VtYR5vLJvLP7gVO /wPAatEIiruHikjLGe54fR5JV3SlM3lWAj6kVNfmABv9Gzt/OkXSbpepn7nrwjXDg14b 50OenCPrxU0Xmv84N9YzlcVs4fj3YDY05Q5NTOv2kBGdJhT+Ghs2F/fEb3QvsxQKjsCN ga1RDYzU0StbZxRUTIuSDyCc4/pu4QjE8Hi83Mh+S4gq1IP3gDoNAqfdnz96fzgpTj61 x+pIlxH1zux1eCM4wCboUmilvALPVDONTTp6bEgP+8eqQ7cF/CCR9aGzw5TuS4FsD36T QgBw== X-Gm-Message-State: APjAAAWEsUtMV05UK9CEt4mtesSL3+j2F74AOO/9mfnpKrFkzMClfLhv k0KRaGgf8bmXvsr65gmj+G26Zcw3 X-Received: by 2002:ac2:5225:: with SMTP id i5mr6156166lfl.157.1564414542446; Mon, 29 Jul 2019 08:35:42 -0700 (PDT) Received: from [192.168.100.6] ([109.252.54.73]) by smtp.googlemail.com with ESMTPSA id i9sm10823571lfl.10.2019.07.29.08.35.41 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Mon, 29 Jul 2019 08:35:41 -0700 (PDT) Subject: Re: [PATCH v4 2/3] nl80211: Limit certain commands to interface owner To: johannes@sipsolutions.net, linux-wireless@vger.kernel.org References: <20190722113312.14031-1-denkenz@gmail.com> <20190722113312.14031-2-denkenz@gmail.com> From: Denis Kenzior Message-ID: <443c450b-31f8-f059-e4c9-83eee00bfce2@gmail.com> Date: Mon, 29 Jul 2019 10:22:02 -0500 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101 Thunderbird/60.8.0 MIME-Version: 1.0 In-Reply-To: <20190722113312.14031-2-denkenz@gmail.com> Content-Type: text/plain; charset=utf-8; format=flowed Content-Language: en-US Content-Transfer-Encoding: 7bit Sender: linux-wireless-owner@vger.kernel.org Precedence: bulk List-ID: X-Mailing-List: linux-wireless@vger.kernel.org Hi Johannes, On 7/22/19 6:33 AM, Denis Kenzior wrote: > If the wdev object has been created (via NEW_INTERFACE) with > SOCKET_OWNER attribute set, then limit certain commands only to the > process that created that wdev. > > This can be used to make sure no other process on the system interferes > by sending unwanted scans, action frames or any other funny business. > > This patch introduces a new internal flag, and checks that flag in the > pre_doit hook. > > Signed-off-by: Denis Kenzior > --- > net/wireless/nl80211.c | 78 ++++++++++++++++++++++++++++++++---------- > 1 file changed, 60 insertions(+), 18 deletions(-) > > Changes in v4: > - Minor restructuring suggested by Arend > > Changes in v3: > - Fix minor locking mistake reported by kernel test robot > > Changes in v2: > - None I noticed that the other patches in this series got applied. Was this one left out on purpose? Regards, -Denis