Add RTNLGRP_{IPV4,IPV6}_MROUTE_R as two new restricted groups for the NETLINK_ROUTE family. Binding to these groups specifically requires CAP_NET_ADMIN to allow multicast of sensitive messages (e.g. mroute cache reports).
Showing the changes to include/uapi/linux (1 of 2 files). Show all
Unified · Split
| @@ -669,6 +669,10 @@ enum rtnetlink_groups { · 668 unmodified lines | ||
| 669 | 669 | #define RTNLGRP_NSID RTNLGRP_NSID |
| 670 | 670 | RTNLGRP_MPLS_NETCONF, |
| 671 | 671 | #define RTNLGRP_MPLS_NETCONF RTNLGRP_MPLS_NETCONF |
| 672 | + RTNLGRP_IPV4_MROUTE_R, | |
| 673 | +#define RTNLGRP_IPV4_MROUTE_R RTNLGRP_IPV4_MROUTE_R | |
| 674 | + RTNLGRP_IPV6_MROUTE_R, | |
| 675 | +#define RTNLGRP_IPV6_MROUTE_R RTNLGRP_IPV6_MROUTE_R | |
| 672 | 676 | __RTNLGRP_MAX |
| 673 | 677 | }; |
| 674 | 678 | #define RTNLGRP_MAX (__RTNLGRP_MAX - 1) |