]> git.ipfire.org Git - thirdparty/kernel/linux.git/commit
RDMA/uverbs: Check CAP_NET_RAW in user namespace for RAW QP create
authorParav Pandit <parav@nvidia.com>
Thu, 26 Jun 2025 18:58:09 +0000 (21:58 +0300)
committerLeon Romanovsky <leon@kernel.org>
Wed, 2 Jul 2025 09:11:44 +0000 (05:11 -0400)
commit4b527c23c92dcc211446a8edb305d9514a8dae05
tree5f80ff32bc2c85b6f1ca0f36a92961b994eb3f20
parenta6dca091ba7646ff5304af660c94fa51b6696476
RDMA/uverbs: Check CAP_NET_RAW in user namespace for RAW QP create

Currently, the capability check is done in the default
init_user_ns user namespace. When a process runs in a
non default user namespace, such check fails. Due to this
when a process is running using Podman, it fails to create
the QP.

Since the RDMA device is a resource within a network namespace,
use the network namespace associated with the RDMA device to
determine its owning user namespace.

Signed-off-by: Parav Pandit <parav@nvidia.com>
Link: https://patch.msgid.link/3914ef9702b01de8843a391ce397fca67d0fc7af.1750963874.git.leon@kernel.org
Signed-off-by: Leon Romanovsky <leon@kernel.org>
drivers/infiniband/core/uverbs_cmd.c