matthias
/
iproute2
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity
iproute2/ip
History
Luca Boccassi ba2fc55b99 Drop capabilities if not running ip exec vrf with libcap 
ip vrf exec requires root or CAP_NET_ADMIN, CAP_SYS_ADMIN and
CAP_DAC_OVERRIDE. It is not possible to run unprivileged commands like
ping as non-root or non-cap-enabled due to this requirement.
To allow users and administrators to safely add the required
capabilities to the binary, drop all capabilities on start if not
invoked with "vrf exec".
Update the manpage with the requirements.

Signed-off-by: Luca Boccassi <bluca@debian.org>
Signed-off-by: Stephen Hemminger <stephen@networkplumber.org>
 		2018-03-27 11:48:23 -07:00
..
.gitignore Another .gitignore file. 2006-08-08 12:11:23 -07:00
Makefile ip: link: add support for netdevsim device type 2018-01-02 20:46:19 -08:00
ifcfg ifcfg/rtpr: convert to POSIX shell 2018-01-10 08:26:09 -08:00
ila_common.h SPDX license identifiers 2017-11-24 12:21:35 -08:00
ip.c Drop capabilities if not running ip exec vrf with libcap 2018-03-27 11:48:23 -07:00
ip6tunnel.c ip/tunnel: Correct and unify ttl/hoplimit printing 2018-01-18 16:34:40 -08:00
ip_common.h SPDX license identifiers 2017-11-24 12:21:35 -08:00
ipaddress.c ip-address: Fix negative prints of large TX rate limits 2018-03-10 09:00:27 -08:00
ipaddrlabel.c drop unneeded include of syslog.h 2017-11-12 16:22:36 -08:00
ipfou.c ip fou: pass family attribute as u8 2018-01-09 07:58:37 -08:00
ipila.c ila: fix formatting of help message 2017-11-24 09:21:43 -08:00
ipl2tp.c ipl2tp: Use get_addr_rta() 2018-01-25 09:31:25 -08:00
iplink.c ip-link: Fix use after free in nl_get_ll_addr_len() 2018-03-02 13:29:40 -08:00
iplink_bond.c iplink: Use ll_name_to_index() instead of if_nametoindex() 2018-01-23 14:50:59 -08:00
iplink_bond_slave.c ip: iplink_bond_slave.c: add json output support (info_slave_data) 2017-08-17 18:02:40 -07:00
iplink_bridge.c iplink: Use ll_name_to_index() instead of if_nametoindex() 2018-01-23 14:50:59 -08:00
iplink_bridge_slave.c iplink: bridge: support bridge port vlan_tunnel attribute 2017-10-31 18:04:30 +01:00
iplink_can.c Merge branch 'master' into net-next 2017-08-21 17:37:15 -07:00
iplink_dummy.c SPDX license identifiers 2017-11-24 12:21:35 -08:00
iplink_geneve.c ip/tunnel: Be consistent when printing tunnel collect metadata 2018-01-24 10:01:26 -08:00
iplink_hsr.c ip: iplink_hsr.c: add json output support 2017-08-17 18:02:40 -07:00
iplink_ifb.c SPDX license identifiers 2017-11-24 12:21:35 -08:00
iplink_ipoib.c ip: iplink_ipoib.c: add json output support 2017-08-17 18:02:41 -07:00
iplink_ipvlan.c ip/ipvlan: enhance ability to add mode flags to existing modes 2017-11-01 22:17:01 +01:00
iplink_macvlan.c ip: link_macvlan.c: add json output support 2017-08-17 18:02:41 -07:00
iplink_netdevsim.c ip: link: add support for netdevsim device type 2018-01-02 20:46:19 -08:00
iplink_nlmon.c SPDX license identifiers 2017-11-24 12:21:35 -08:00
iplink_team.c SPDX license identifiers 2017-11-24 12:21:35 -08:00
iplink_vcan.c SPDX license identifiers 2017-11-24 12:21:35 -08:00
iplink_vlan.c ip: iplink_vlan.c: add json output support 2017-08-17 18:02:41 -07:00
iplink_vrf.c lib/libnetlink: update rtnl_talk to support malloc buff at run time 2017-10-26 12:29:29 +02:00
iplink_vxcan.c vxcan,veth: Forbid "type" for peer device 2017-12-28 09:35:27 -08:00
iplink_vxlan.c ip/tunnel: Be consistent when printing tunnel collect metadata 2018-01-24 10:01:26 -08:00
iplink_xdp.c iplink: communicate ifindex for xdp offload 2017-11-26 11:57:58 -08:00
iplink_xstats.c add missing iplink_xstats.c 2017-02-20 08:53:40 -08:00
ipmacsec.c lib/libnetlink: update rtnl_talk to support malloc buff at run time 2017-10-26 12:29:29 +02:00
ipmaddr.c drop unneeded include of syslog.h 2017-11-12 16:22:36 -08:00
ipmonitor.c drop unneeded include of syslog.h 2017-11-12 16:22:36 -08:00
ipmroute.c ipmroute: Use inet_addr_match_rta() 2018-01-25 09:31:22 -08:00
ipneigh.c ipneigh: Use inet_addr_match_rta() 2018-01-25 09:31:24 -08:00
ipnetconf.c drop unneeded include of syslog.h 2017-11-12 16:22:36 -08:00
ipnetns.c netns: allow negative nsid 2018-02-08 07:57:34 -08:00
ipntable.c lib/libnetlink: update rtnl_talk to support malloc buff at run time 2017-10-26 12:29:29 +02:00
ipprefix.c netlink route attribute cleanup 2017-02-24 08:56:38 -08:00
iproute.c Revert "iproute: "list/flush/save default" selected all of the routes" 2018-03-12 14:02:36 -07:00
iproute_lwtunnel.c Merge branch 'iproute2-master' into iproute2-next 2018-01-24 09:59:03 -08:00
iproute_lwtunnel.h SPDX license identifiers 2017-11-24 12:21:35 -08:00
iprule.c iprule: Use inet_addr_match_rta() 2018-01-25 09:31:21 -08:00
ipseg6.c ip: Get rid of inet_get_addr() 2018-01-21 09:38:26 -08:00
iptoken.c drop unneeded include of syslog.h 2017-11-12 16:22:36 -08:00
iptunnel.c ip/tunnel: Correct and unify ttl/hoplimit printing 2018-01-18 16:34:40 -08:00
iptuntap.c tc: B.W limits can now be specified in %. 2017-11-24 11:22:13 -08:00
ipvrf.c Drop capabilities if not running ip exec vrf with libcap 2018-03-27 11:48:23 -07:00
ipxfrm.c ipxfrm: Replace STRBUF_CAT macro with strlcat() 2017-09-01 12:10:54 -07:00
link_gre.c ip/tunnel: Unify local/remote endpoint address printing 2018-01-25 09:31:29 -08:00
link_gre6.c ip/tunnel: Unify local/remote endpoint address printing 2018-01-25 09:31:29 -08:00
link_ip6tnl.c ip/tunnel: Unify local/remote endpoint address printing 2018-01-25 09:31:29 -08:00
link_iptnl.c ip/tunnel: Unify local/remote endpoint address printing 2018-01-25 09:31:29 -08:00
link_veth.c vxcan,veth: Forbid "type" for peer device 2017-12-28 09:35:27 -08:00
link_vti.c ip/tunnel: Unify local/remote endpoint address printing 2018-01-25 09:31:29 -08:00
link_vti6.c ip/tunnel: Unify local/remote endpoint address printing 2018-01-25 09:31:29 -08:00
routef mark shell scripts +x 2018-01-10 08:23:49 -08:00
routel mark shell scripts +x 2018-01-10 08:23:49 -08:00
rtm_map.c drop unneeded include of syslog.h 2017-11-12 16:22:36 -08:00
rtmon.c drop unneeded include of syslog.h 2017-11-12 16:22:36 -08:00
rtpr ifcfg/rtpr: convert to POSIX shell 2018-01-10 08:26:09 -08:00
static-syms.c SPDX license identifiers 2017-11-24 12:21:35 -08:00
tcp_metrics.c tcp_metric: Use get_addr_rta() 2018-01-25 09:31:27 -08:00
tunnel.c ip/tunnel: Unify local/remote endpoint address printing 2018-01-25 09:31:29 -08:00
tunnel.h ip/tunnel: Unify local/remote endpoint address printing 2018-01-25 09:31:29 -08:00
xdp.h iplink: communicate ifindex for xdp offload 2017-11-26 11:57:58 -08:00
xfrm.h ip: Fix compilation break on old systems 2017-11-13 10:07:25 -08:00
xfrm_monitor.c netlink route attribute cleanup 2017-02-24 08:56:38 -08:00
xfrm_policy.c Merge branch 'master' into net-next 2017-11-09 09:45:17 +09:00
xfrm_state.c Merge branch 'master' into net-next 2017-11-09 09:45:17 +09:00