netbird/gvisor
0
0
Fork 0
mirror of https://github.com/netbirdio/gvisor.git synced 2026-05-22 17:12:49 -07:00
Code Issues Packages Projects Releases Wiki Activity

Remove out-of-date TODOs.

Browse Source 
We already have network namespace for netstack.

PiperOrigin-RevId: 305341954
This commit is contained in:
Ting-Yu Wang
2020-04-07 14:33:48 -07:00
committed by gVisor bot
parent 47db097773
commit d5ddb53650
1 changed files with 0 additions and 8 deletions
Download Patch File Download Diff File Expand all files Collapse all files
pkg/sentry/socket/netstack/provider.go
-8
View File
@@ -62,10 +62,6 @@ func getTransportProtocol(ctx context.Context, stype linux.SockType, protocol in
}
case linux.SOCK_RAW:
// TODO(b/142504697): "In order to create a raw socket, a
// process must have the CAP_NET_RAW capability in the user
// namespace that governs its network namespace." - raw(7)
// Raw sockets require CAP_NET_RAW.
creds := auth.CredentialsFromContext(ctx)
if !creds.HasCapability(linux.CAP_NET_RAW) {
@@ -141,10 +137,6 @@ func (p *provider) Socket(t *kernel.Task, stype linux.SockType, protocol int) (*
}
func packetSocket(t *kernel.Task, epStack *Stack, stype linux.SockType, protocol int) (*fs.File, *syserr.Error) {
// TODO(b/142504697): "In order to create a packet socket, a process
// must have the CAP_NET_RAW capability in the user namespace that
// governs its network namespace." - packet(7)
// Packet sockets require CAP_NET_RAW.
creds := auth.CredentialsFromContext(t)
if !creds.HasCapability(linux.CAP_NET_RAW) {