Re: [PATCH net-2.6.25] Add packet filtering based on process's security context.

2008-01-24 Thread Paul Moore
On Thursday 24 January 2008 6:47:55 am Tetsuo Handa wrote: > Are there any remaining questions/problems about this patch? > If none, I want this patch applied to net-2.6.25 tree. Hello, Taking into consideration that there are no current in-tree users of this patch and the only known user of thi

Re: [PATCH net-2.6.25] Add packet filtering based on process's security context.

2008-01-24 Thread Tetsuo Handa
Hello. Are there any remaining questions/problems about this patch? If none, I want this patch applied to net-2.6.25 tree. Regards. --- This patch modifies security_socket_post_accept() and introduces security_socket_post_recv_datagram() LSM hooks. Currently, security_socket_post_ac

Re: [PATCH net-2.6.25] Add packet filtering based on process's security context.

2008-01-22 Thread Casey Schaufler
--- Tetsuo Handa <[EMAIL PROTECTED]> wrote: > ... > > Currently, there is no way to directly map security context from incoming > packet to user process. This is because the creator or owner of a socket is > not always the receiver of an incoming packet. The userland process who > receives the i

Re: [PATCH net-2.6.25] Add packet filtering based on process's security context.

2007-12-02 Thread Patrick McHardy
James Morris wrote: On Thu, 22 Nov 2007, Tetsuo Handa wrote: This patch allows LSM modules filter incoming connections/datagrams based on the process's security context who is attempting to pick up. There are already hooks to filter incoming connections/datagrams based on the socket's security

Re: [PATCH net-2.6.25] Add packet filtering based on process's security context.

2007-11-22 Thread James Morris
On Thu, 22 Nov 2007, Tetsuo Handa wrote: > This patch allows LSM modules filter incoming connections/datagrams > based on the process's security context who is attempting to pick up. > > There are already hooks to filter incoming connections/datagrams > based on the socket's security context, but