Subject: Re: [PATCH v3 net-next 3/5] sock: ULP infrastructure

From: Hannes Frederic Sowa <[email-masked]>
Date: Tue, 08 Aug 2017 12:38:58 -0400

Tom Herbert <[email-masked]> writes:

> +#ifdef CONFIG_MODULES
> +	if (!ulp && capable(CAP_NET_ADMIN)) {
> +		rcu_read_unlock();
> +		request_module("%s", name);
> +		rcu_read_lock();
> +		ulp = ulp_find(name);
> +	}
> +#endif

It looks to me that this allows users with only CAP_NET_ADMIN
privileges to load every module?