]> git.ipfire.org Git - thirdparty/kernel/linux.git/commit
Merge branch 'tcp-ulp-diag-expose-more-to-non-net-admin-users'
authorJakub Kicinski <kuba@kernel.org>
Sat, 8 Mar 2025 03:39:57 +0000 (19:39 -0800)
committerJakub Kicinski <kuba@kernel.org>
Sat, 8 Mar 2025 03:39:57 +0000 (19:39 -0800)
commit530581047d32d2f2c92187a467806a8d629f5356
treeef4fff5f2a7371f48ba721ae92e8ab4a22583564
parent15933ad12c9e72ec8ae2c8a9176c2acecf382e3d
parent0d7336f8f06d4a1a1e2c62624d086561e8490bb7
Merge branch 'tcp-ulp-diag-expose-more-to-non-net-admin-users'

Matthieu Baerts says:

====================
tcp: ulp: diag: expose more to non net admin users

Since its introduction in commit 61723b393292 ("tcp: ulp: add functions
to dump ulp-specific information"), the ULP diag info have been exported
only to users with CAP_NET_ADMIN capability.

Not everything is sensitive, and some info can be exported to all users
in order to ease the debugging from the userspace side without requiring
additional capabilities.

First, the ULP name can be easily exported. Then more depending on each
layer:

 - On kTLS side, it looks like everything can be exported to all users:
   version, cipher type, tx/rx user config type, plus some flags.

 - On MPTCP side, everything but the sequence numbers are exported to
   all non net admin users, similar to TCP.
====================

Link: https://patch.msgid.link/20250306-net-next-tcp-ulp-diag-net-admin-v1-0-06afdd860fc9@kernel.org
Signed-off-by: Jakub Kicinski <kuba@kernel.org>