Home » Mailing list archives » linux-netdev » 2009 » April » 22

Re: [PATCH] LSM: Add security_socket_post_accept() and security_socket_post_recv_datagram().

Previous message: [thread] [date] [author]
Next message: [thread] [date] [author]
[view in full thread]
From: David Miller
Subject: Re: [PATCH] LSM: Add security_socket_post_accept() and security_socket_post_recv_datagram().
Date: Tuesday, April 21, 2009 - 10:07 pm

From: Tetsuo Handa <penguin-kernel@i-love.sakura.ne.jp>
Date: Wed, 22 Apr 2009 14:02:16 +0900


Do me a favor.  We have mechanisms by which you can queue up packets
(even into userspace) to make policy decisions.

You can make your decision there, and if appropriate, reinject the
packet back into the kernel input processing.

This is how netfilter ip_queue allows people to implement policies
in userspace, and you could use it in the kernel and then need
none of these ugly hooks.
--
To unsubscribe from this list: send the line "unsubscribe netdev" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Previous message: [thread] [date] [author]
Next message: [thread] [date] [author]
Messages in current thread:
[PATCH] LSM: Add security_socket_post_accept() and securit ..., Tetsuo Handa, (Tue Apr 14, 3:44 am)
Re: [PATCH] LSM: Add security_socket_post_accept() and sec ..., Paul Moore, (Tue Apr 14, 3:59 pm)
Re: [PATCH] LSM: Add security_socket_post_accept() and sec ..., Tetsuo Handa, (Tue Apr 14, 10:12 pm)
[PATCH 1/2] LSM: Add security_socket_post_accept() and sec ..., Tetsuo Handa, (Wed Apr 15, 3:51 am)
[PATCH 2/2] tomoyo: Add network access control support., Tetsuo Handa, (Wed Apr 15, 3:51 am)
Re: [PATCH] LSM: Add security_socket_post_accept() and sec ..., Paul Moore, (Thu Apr 16, 11:23 am)
Re: [PATCH] LSM: Add security_socket_post_accept() and sec ..., Tetsuo Handa, (Sat Apr 18, 1:34 am)
[PATCH v2] LSM: Add security_socket_post_accept() and secu ..., Tetsuo Handa, (Sun Apr 19, 1:03 am)
Re: [PATCH] LSM: Add security_socket_post_accept() and sec ..., Paul Moore, (Mon Apr 20, 3:22 pm)
Re: [PATCH] LSM: Add security_socket_post_accept() and sec ..., Tetsuo Handa, (Tue Apr 21, 3:54 am)
Re: [PATCH] LSM: Add security_socket_post_accept() and sec ..., David Miller, (Tue Apr 21, 3:57 am)
Re: [PATCH] LSM: Add security_socket_post_accept() and sec ..., Tetsuo Handa, (Tue Apr 21, 4:39 am)
Re: [PATCH] LSM: Add security_socket_post_accept() and sec ..., David Miller, (Tue Apr 21, 4:40 am)
Re: [PATCH] LSM: Add security_socket_post_accept() and sec ..., Tetsuo Handa, (Tue Apr 21, 5:26 am)
Re: [PATCH] LSM: Add security_socket_post_accept() and sec ..., David Miller, (Tue Apr 21, 5:37 am)
Re: [PATCH] LSM: Add security_socket_post_accept() andsecu ..., Tetsuo Handa, (Tue Apr 21, 5:52 am)
Re: [PATCH] LSM: Add security_socket_post_accept() andsecu ..., David Miller, (Tue Apr 21, 6:04 am)
Re: [PATCH] LSM: Add security_socket_post_accept() and sec ..., Tetsuo Handa, (Tue Apr 21, 5:55 pm)
Re: [PATCH] LSM: Add security_socket_post_accept() and sec ..., David Miller, (Tue Apr 21, 6:14 pm)
Re: [PATCH] LSM: Add security_socket_post_accept() and sec ..., Tetsuo Handa, (Tue Apr 21, 6:49 pm)
Re: [PATCH] LSM: Add security_socket_post_accept() and sec ..., Greg Lindahl, (Tue Apr 21, 6:52 pm)
Re: [PATCH] LSM: Add security_socket_post_accept() and sec ..., David Miller, (Tue Apr 21, 9:22 pm)
Re: [PATCH] LSM: Add security_socket_post_accept() and sec ..., David Miller, (Tue Apr 21, 9:23 pm)
Re: [PATCH] LSM: Add security_socket_post_accept() and sec ..., Tetsuo Handa, (Tue Apr 21, 10:02 pm)
Re: [PATCH] LSM: Add security_socket_post_accept() and sec ..., David Miller, (Tue Apr 21, 10:07 pm)
Re: [PATCH] LSM: Add security_socket_post_accept() and sec ..., Tetsuo Handa, (Tue Apr 21, 10:38 pm)
Re: [PATCH] LSM: Add security_socket_post_accept() and sec ..., David Miller, (Tue Apr 21, 10:52 pm)
Re: [PATCH] LSM: Add security_socket_post_accept() and sec ..., Greg Lindahl, (Tue Apr 21, 11:10 pm)
Re: [PATCH] LSM: Add security_socket_post_accept() and sec ..., David Miller, (Tue Apr 21, 11:34 pm)
Re: [PATCH] LSM: Add security_socket_post_accept() and sec ..., Greg Lindahl, (Tue Apr 21, 11:41 pm)
Re: [PATCH] LSM: Add security_socket_post_accept() and sec ..., David Miller, (Tue Apr 21, 11:46 pm)
Re: [PATCH] LSM: Add security_socket_post_accept() and sec ..., Greg Lindahl, (Tue Apr 21, 11:54 pm)
Re: [PATCH] LSM: Add security_socket_post_accept() and sec ..., David Miller, (Tue Apr 21, 11:58 pm)
Re: [PATCH] LSM: Add security_socket_post_accept() and sec ..., Tetsuo Handa, (Wed Apr 22, 12:19 am)
Re: [PATCH] LSM: Add security_socket_post_accept() and sec ..., Tetsuo Handa, (Thu Apr 23, 7:00 am)
Re: [PATCH] LSM: Add security_socket_post_accept() and sec ..., David Miller, (Thu Apr 23, 7:10 am)
Re: [PATCH] LSM: Add security_socket_post_accept() and sec ..., Samir Bellabes, (Thu Apr 23, 7:47 am)
Re: [PATCH] LSM: Add security_socket_post_accept() and sec ..., Tetsuo Handa, (Thu Apr 23, 7:07 pm)
Re: [PATCH] LSM: Add security_socket_post_accept() and sec ..., David Miller, (Thu Apr 23, 9:35 pm)
Re: [PATCH] LSM: Add security_socket_post_accept() and sec ..., David Miller, (Thu Apr 23, 9:41 pm)
Re: [PATCH] LSM: Add security_socket_post_accept() and sec ..., Tetsuo Handa, (Thu Apr 23, 9:55 pm)