diff options
| author | Marcel Holtmann <marcel@holtmann.org> | 2012-02-20 23:54:10 +0400 |
|---|---|---|
| committer | Johan Hedberg <johan.hedberg@intel.com> | 2012-02-21 01:06:43 +0400 |
| commit | 801f13bd8ecc58f2cf42ec602a2b5db10fc5a132 (patch) | |
| tree | 1b6a79e7e9890d6442d796f4f29e268d42faca1e /net/bluetooth/hci_sock.c | |
| parent | cd82e61c110a36e398323e422896fcfe05879fed (diff) | |
| download | linux-801f13bd8ecc58f2cf42ec602a2b5db10fc5a132.tar.xz | |
Bluetooth: Restrict access to management interface
The management interface on the HCI control channel should be restricted
to applications with CAP_NET_ADMIN permission.
Signed-off-by: Marcel Holtmann <marcel@holtmann.org>
Signed-off-by: Johan Hedberg <johan.hedberg@intel.com>
Diffstat (limited to 'net/bluetooth/hci_sock.c')
| -rw-r--r-- | net/bluetooth/hci_sock.c | 5 |
1 files changed, 5 insertions, 0 deletions
diff --git a/net/bluetooth/hci_sock.c b/net/bluetooth/hci_sock.c index 213697d23771..8c429a179aa4 100644 --- a/net/bluetooth/hci_sock.c +++ b/net/bluetooth/hci_sock.c @@ -656,6 +656,11 @@ static int hci_sock_bind(struct socket *sock, struct sockaddr *addr, int addr_le goto done; } + if (!capable(CAP_NET_ADMIN)) { + err = -EPERM; + goto done; + } + set_bit(HCI_PI_MGMT_INIT, &hci_pi(sk)->flags); break; |