Add RTNLGRP_{IPV4,IPV6}_MROUTE_R as two new restricted groups for the NETLINK_ROUTE family. Binding to these groups specifically requires CAP_NET_ADMIN to allow multicast of sensitive messages (e.g. mroute cache reports).
Showing the changes to include/uapi/linux (1 of 2 files). Show all
Unified · Split
| @@ -669,6 +669,10 @@ enum rtnetlink_groups { · 668 unmodified lines | |||
| 669 | #define RTNLGRP_NSID RTNLGRP_NSID | 669 | #define RTNLGRP_NSID RTNLGRP_NSID |
| 670 | RTNLGRP_MPLS_NETCONF, | 670 | RTNLGRP_MPLS_NETCONF, |
| 671 | #define RTNLGRP_MPLS_NETCONF RTNLGRP_MPLS_NETCONF | 671 | #define RTNLGRP_MPLS_NETCONF RTNLGRP_MPLS_NETCONF |
| 672 | RTNLGRP_IPV4_MROUTE_R, | ||
| 673 | #define RTNLGRP_IPV4_MROUTE_R RTNLGRP_IPV4_MROUTE_R | ||
| 674 | RTNLGRP_IPV6_MROUTE_R, | ||
| 675 | #define RTNLGRP_IPV6_MROUTE_R RTNLGRP_IPV6_MROUTE_R | ||
| 672 | __RTNLGRP_MAX | 676 | __RTNLGRP_MAX |
| 673 | }; | 677 | }; |
| 674 | #define RTNLGRP_MAX (__RTNLGRP_MAX - 1) | 678 | #define RTNLGRP_MAX (__RTNLGRP_MAX - 1) |