lkml.org 
[lkml]   [2006]   [Feb]   [20]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
    /
    Date
    From
    SubjectRe: [PATCH 2.6.15.4 1/1][RFC] ipt_owner: inode match supporting both incoming and outgoing packets
    On Sat, 18 Feb 2006, Török Edwin wrote:

    > This is a patch based on Luke Kenneth Casson Leighton's patch [1]
    > One problem with that patch was that it couldn't be used for filtering
    > incoming packets, due to the fact that more than one process can listen on
    > the same socket ([2],[3]).

    Have a look at my skfilter patches:
    http://people.redhat.com/jmorris/selinux/skfilter/kernel/

    These implement a scheme for matching incoming packets against sockets by
    adding a new hook in the socket layer.

    For upstream merge, the issues are:
    - should the new socket hook be used for all incoming packets?
    - ensure IP queuing still works

    Patrick: any other issues?



    - James
    --
    James Morris
    <jmorris@namei.org>
    \
     
     \ /
      Last update: 2006-02-20 17:29    [W:0.037 / U:90.552 seconds]
    ©2003-2016 Jasper Spaans. hosted at Digital OceanAdvertise on this site