From: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Date: Wed, 10 Apr 2024 19:10:26 +0000 (+0200)
Subject: 4.19-stable patches
X-Git-Tag: v4.19.312~52
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=fbe5d0dd2b9a5117cb9dc84c4c2b4010cd109e1e;p=thirdparty%2Fkernel%2Fstable-queue.git

4.19-stable patches

added patches:
	tty-n_gsm-require-cap_net_admin-to-attach-n_gsm0710-ldisc.patch
---

diff --git a/queue-4.19/series b/queue-4.19/series
index 080a233cf59..b13e1ae8569 100644
--- a/queue-4.19/series
+++ b/queue-4.19/series
@@ -164,3 +164,4 @@ tools-iio-replace-seekdir-in-iio_generic_buffer.patch
 usb-sl811-hcd-only-defined-function-checkdone-if-qui.patch
 fbdev-viafb-fix-typo-in-hw_bitblt_1-and-hw_bitblt_2.patch
 fbmon-prevent-division-by-zero-in-fb_videomode_from_.patch
+tty-n_gsm-require-cap_net_admin-to-attach-n_gsm0710-ldisc.patch
diff --git a/queue-4.19/tty-n_gsm-require-cap_net_admin-to-attach-n_gsm0710-ldisc.patch b/queue-4.19/tty-n_gsm-require-cap_net_admin-to-attach-n_gsm0710-ldisc.patch
new file mode 100644
index 00000000000..54b56cf47d6
--- /dev/null
+++ b/queue-4.19/tty-n_gsm-require-cap_net_admin-to-attach-n_gsm0710-ldisc.patch
@@ -0,0 +1,34 @@
+From 67c37756898a5a6b2941a13ae7260c89b54e0d88 Mon Sep 17 00:00:00 2001
+From: Thadeu Lima de Souza Cascardo <cascardo@canonical.com>
+Date: Mon, 31 Jul 2023 15:59:42 -0300
+Subject: tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
+
+From: Thadeu Lima de Souza Cascardo <cascardo@canonical.com>
+
+commit 67c37756898a5a6b2941a13ae7260c89b54e0d88 upstream.
+
+Any unprivileged user can attach N_GSM0710 ldisc, but it requires
+CAP_NET_ADMIN to create a GSM network anyway.
+
+Require initial namespace CAP_NET_ADMIN to do that.
+
+Signed-off-by: Thadeu Lima de Souza Cascardo <cascardo@canonical.com>
+Link: https://lore.kernel.org/r/20230731185942.279611-1-cascardo@canonical.com
+From: Salvatore Bonaccorso <carnil@debian.org>
+Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+---
+ drivers/tty/n_gsm.c |    3 +++
+ 1 file changed, 3 insertions(+)
+
+--- a/drivers/tty/n_gsm.c
++++ b/drivers/tty/n_gsm.c
+@@ -2435,6 +2435,9 @@ static int gsmld_open(struct tty_struct
+ 	struct gsm_mux *gsm;
+ 	int ret;
+ 
++	if (!capable(CAP_NET_ADMIN))
++		return -EPERM;
++
+ 	if (tty->ops->write == NULL)
+ 		return -EINVAL;
+