Subject: Re: [Coverity] Untrusted user data in kernel

From: "David S. Miller" <[email-masked]>
Date: Fri, 17 Dec 2004 11:30:06 -0800

On Fri, 17 Dec 2004 20:34:55 +0100
Tomas Carnecky <[email-masked]> wrote:

>  > It is already checked in do_ip6t_set_ctl(). Otherwise anyone could
>  > replace iptables rules :)
> For me it seems that only CAP_NET_ADMIN is checked and not the data.

If that's the case then I agree with you Tomas.