Re: Multicast netlink for non-root process

[Andi Kleen]

Jean Tourrilhes <[e-mail]> writes:
> 	The cause is here :
> ----------- net/netlink/af_netlink.c - l322 ------------------
> 
> static int netlink_bind(struct socket *sock, struct sockaddr *addr, int addr_len)
> {
> [...]
> 	/* Only superuser is allowed to listen multicasts */
> 	if (nladdr->nl_groups && !capable(CAP_NET_ADMIN))
> 		return -EPERM;
> --------------------------------------------------------------
> 
> 	Why ?

There used to be a reason for it (ask Alexey for details), but it has gone.
It should be safe now to remove it I think.

-Andi