tree 14a355d650dc467e105fe00bc62a3599e890bc50
parent 349fb2d6492e7d644bc8e670ba11d764a3e2901b
author Patrick McHardy <kaber@trash.net> 1206674890 -0700
committer David S. Miller <davem@davemloft.net> 1206674890 -0700

[LLC]: Restrict LLC sockets to root

LLC currently allows users to inject raw frames, including IP packets
encapsulated in SNAP. While Linux doesn't handle IP over SNAP, other
systems do. Restrict LLC sockets to root similar to packet sockets.

[ Modified Patrick's patch to use CAP_NEW_RAW --DaveM ]

Signed-off-by: Patrick McHardy <kaber@trash.net>
Signed-off-by: David S. Miller <davem@davemloft.net>