Re: [PATCH net] net: devmem: check uid and netns in net_devmem_get_binding()

[Paolo Abeni]

On 10/8/26 23:40, Kaifeng Wang wrote:
> > Could this break existing devmem TX users whose TCP socket and netlink
> > socket have different owners?
>
> This restriction is intentional. NETDEV_CMD_BIND_TX was made
> unprivileged specifically so that an application can bind its own
> dmabuf directly and transmit on its own sockets without needing a
> separate privileged helper process. As noted in the comment above
> netdev_nl_bind_tx_doit(), bind-tx is meant for the caller to transmit
> "on their own sockets". We are not aware of any userspace workloads
> that split bind-tx and TCP socket creation across different UIDs or
> network namespaces.
Still there is slight possibility of breaking some weird setup, so
I'm going to apply this one to net-next.

/P