Messages in this thread | | | Date | Fri, 27 Aug 2004 10:50:23 -0400 (EDT) | From | James Morris <> | Subject | Re: [0/2][ANNOUNCE] nproc: netlink access to /proc information |
| |
On Fri, 27 Aug 2004, Roger Luethi wrote:
> At the moment, the kernel sends a separate netlink message for every > process.
You should look at the way rtnetlink dumps large amounts of data to userspace.
> I haven't implemented any form of access control. One possibility is > to use some of the reserved bits in the ID field to indicate access > restrictions to both kernel and user space (e.g. everyone, process owner, > root)
So, user tools would all need to be privileged? That sounds problematic.
> and add some LSM hook for those needing fine-grained control.
Control over the user request, or what the kernel returns? If the latter, LSM is not really a filtering API.
- James -- James Morris <jmorris@redhat.com>
- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
| |