Re: [PATCH 6.6.y] net: add missing ns_capable check for peer netns

From: Greg KH

Date: Thu Jul 02 2026 - 10:20:11 EST


On Wed, Jun 17, 2026 at 08:26:39AM +0000, Maximilian Heyne wrote:
> The upstream commit 7b735ef81286 ("rtnetlink: add missing
> netlink_ns_capable() check for peer netns") doesn't apply on older
> stable kernels due to refactoring. Therefore, this patch is an attempt
> to implement the same capability check just directly in the respective
> interface types.

Why not just take the upstream commits instead? That's simpler over
time than a one-off patch.

thanks,

greg k-h