Willem de Bruijn e8390a47a3 tun: revert fix group permission check ...

[ Upstream commit a70c7b3cbc ]

This reverts commit 3ca459eaba.

The blamed commit caused a regression when neither tun->owner nor
tun->group is set. This is intended to be allowed, but now requires
CAP_NET_ADMIN.

Discussion in the referenced thread pointed out that the original
issue that prompted this patch can be resolved in userspace.

The relaxed access control may also make a device accessible when it
previously wasn't, while existing users may depend on it to not be.

This is a clean pure git revert, except for fixing the indentation on
the gid_valid line that checkpatch correctly flagged.

Fixes: 3ca459eaba ("tun: fix group permission check")
Link: https://lore.kernel.org/netdev/CAFqZXNtkCBT4f+PwyVRmQGoT3p1eVa01fCG_aNtpt6dakXncUg@mail.gmail.com/
Signed-off-by: Willem de Bruijn <willemb@google.com>
Cc: Ondrej Mosnacek <omosnace@redhat.com>
Cc: Stas Sergeev <stsp2@yandex.ru>
Link: https://patch.msgid.link/20250204161015.739430-1-willemdebruijn.kernel@gmail.com
Signed-off-by: Jakub Kicinski <kuba@kernel.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>

2025-02-17 09:40:14 +01:00

..

appletalk

…

arcnet

…

bonding

bonding: Fix feature propagation of NETIF_F_GSO_ENCAP_ALL

2024-12-19 18:11:33 +01:00

caif

…

can

can: mcp251xfd: mcp251xfd_get_tef_len(): work around erratum DS80000789E 6.

2024-12-14 19:59:52 +01:00

dsa

net: dsa: microchip: Fix LAN937X set_ageing_time function

2025-01-09 13:31:58 +01:00

ethernet

net: atlantic: fix warning during hot unplug

2025-02-17 09:40:13 +01:00

fddi

…

fjes

…

hamradio

…

hippi

…

hyperv

hv_netvsc: Fix VF namespace also in synthetic NIC NETDEV_REGISTER event

2024-11-01 01:58:33 +01:00

ieee802154

ieee802154: ca8210: Add missing check for kfifo_alloc() in ca8210_probe()

2025-01-17 13:36:11 +01:00

ipa

…

ipvlan

…

mctp

mctp i2c: handle NULL header address

2024-11-08 16:28:26 +01:00

mdio

net: mdiobus: fix an OF node reference leak

2024-12-27 13:58:49 +01:00

netdevsim

net: netdevsim: try to close UDP port harness races

2025-02-08 09:52:30 +01:00

pcs

…

phy

net: sfp: change quirks for Alcatel Lucent G-010S-P

2024-12-14 20:00:05 +01:00

plip

net: plip: fix break; causing plip to never transmit

2024-11-01 01:58:29 +01:00

ppp

ppp: fix ppp_async_encode() illegal access

2024-10-17 15:24:30 +02:00

pse-pd

…

slip

slip: make slhc_remember() more robust against malicious packets

2024-10-17 15:24:30 +02:00

team

team: prevent adding a device which is already a team device lower

2025-02-08 09:51:54 +01:00

thunderbolt

…

usb

net: usb: rtl8150: enable basic endpoint checking

2025-02-08 09:52:36 +01:00

vmxnet3

vmxnet3: Fix tx queue race condition with XDP

2025-02-17 09:40:12 +01:00

vxlan

vxlan: Fix uninit-value in vxlan_vnifilter_dump()

2025-02-08 09:52:30 +01:00

wan

…

wireguard

…

wireless

wifi: iwlwifi: avoid memory leak

2025-02-17 09:40:08 +01:00

wwan

net: wwan: iosm: Fix hibernation by re-binding the driver around it

2025-02-17 09:40:08 +01:00

xen-netback

…

amt.c

…

bareudp.c

…

dummy.c

…

eql.c

…

geneve.c

geneve: do not assume mac header is set in geneve_xmit_skb()

2024-12-14 19:59:40 +01:00

gtp.c

gtp: Destroy device along with udp socket's netns dismantle.

2025-01-23 17:21:10 +01:00

ifb.c

…

Kconfig

…

LICENSE.SRC

…

loopback.c

…

macsec.c

macsec: Fix use-after-free while sending the offloading packet

2024-11-08 16:28:18 +01:00

macvlan.c

…

macvtap.c

…

Makefile

…

mdio.c

…

mhi_net.c

…

mii.c

…

net_failover.c

…

netconsole.c

…

nlmon.c

…

ntb_netdev.c

…

rionet.c

…

sb1000.c

…

Space.c

…

sungem_phy.c

…

tap.c

…

tun.c

tun: revert fix group permission check

2025-02-17 09:40:14 +01:00

veth.c

…

virtio_net.c

virtio-net: fix overflow inside virtnet_rq_alloc

2024-12-14 20:00:07 +01:00

vrf.c

ipv6: introduce dst_rt6_info() helper

2024-12-14 19:59:35 +01:00

vsockmon.c

…

xen-netfront.c

xen/netfront: fix crash when removing device

2024-12-19 18:11:35 +01:00