cxgb3: Use CAP_SYS_RAWIO for firmware
authorAlan Cox <alan@lxorguk.ukuu.org.uk>
Tue, 29 Apr 2008 13:29:30 +0000 (14:29 +0100)
committerJeff Garzik <jgarzik@redhat.com>
Tue, 6 May 2008 16:27:53 +0000 (12:27 -0400)
commit1b3aa7afb60d34867eea5e73ee943b2a026fc47c
treeb3be54db2b92251ba06c3d5155750f4ce0c593c8
parent01935d7d2c544a5dfc8313f79ed164d45115aa33
cxgb3: Use CAP_SYS_RAWIO for firmware

Otherwise theoretically at least

CAP_NET_ADMIN
Reload new firmware
Wait..
Firmware patches kernel

So it should be CAY_SYS_RAWIO - not that I suspect this is in fact a
credible attack vector!

Signed-off-by: Alan Cox <alan@redhat.com>
Signed-off-by: Jeff Garzik <jgarzik@redhat.com>
drivers/net/cxgb3/cxgb3_main.c