diff options
| author | Lorenzo Colitti <lorenzo@google.com> | 2016-09-07 18:42:25 +0300 |
|---|---|---|
| committer | David S. Miller <davem@davemloft.net> | 2016-09-09 02:13:09 +0300 |
| commit | d545caca827b65aab557a9e9dcdcf1e5a3823c2d (patch) | |
| tree | 1ec87b39e2490acc3f435d650d6ddc6e594300cf /include/uapi/linux/inet_diag.h | |
| parent | 74f13c80e210ff5a9e7b13b9853d8a866972f385 (diff) | |
| download | linux-d545caca827b65aab557a9e9dcdcf1e5a3823c2d.tar.xz | |
net: inet: diag: expose the socket mark to privileged processes.
This adds the capability for a process that has CAP_NET_ADMIN on
a socket to see the socket mark in socket dumps.
Commit a52e95abf772 ("net: diag: allow socket bytecode filters to
match socket marks") recently gave privileged processes the
ability to filter socket dumps based on mark. This patch is
complementary: it ensures that the mark is also passed to
userspace in the socket's netlink attributes. It is useful for
tools like ss which display information about sockets.
Tested: https://android-review.googlesource.com/270210
Signed-off-by: Lorenzo Colitti <lorenzo@google.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Diffstat (limited to 'include/uapi/linux/inet_diag.h')
| -rw-r--r-- | include/uapi/linux/inet_diag.h | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/include/uapi/linux/inet_diag.h b/include/uapi/linux/inet_diag.h index 5581206a08ae..b5c366f87b3e 100644 --- a/include/uapi/linux/inet_diag.h +++ b/include/uapi/linux/inet_diag.h @@ -123,6 +123,7 @@ enum { INET_DIAG_LOCALS, INET_DIAG_PEERS, INET_DIAG_PAD, + INET_DIAG_MARK, __INET_DIAG_MAX, }; |