Re: IP_FREEBIND and CAP_NET_ADMIN

2007-02-06 Thread David Miller
From: KOVACS Krisztian <[EMAIL PROTECTED]> Date: Tue, 6 Feb 2007 15:36:18 +0100 > Neither of these require IP_FREEBIND as core functionality, and will > probably work if IP_FREEBIND would be bound to CAP_NET_ADMIN. > > So the question is: shall we take the IP_FREEBIND approach, this would > cha

IP_FREEBIND and CAP_NET_ADMIN (was: Re: [PATCH/RFC 05/10] Remove local address check on IP output)

2007-02-06 Thread KOVACS Krisztian
On Wednesday 10 January 2007 07:47, Patrick McHardy wrote: > KOVACS Krisztian wrote: > > ip_route_output() contains a check to make sure that no flows with > > non-local source IP addresses are routed. Unfortunately this check > > makes it completely impossible to use non-local bound sockets as no