Messages in this thread | | | Subject | Re: RFC: Network privilege separation. | From | Andi Kleen <> | Date | Wed, 07 Jan 2009 22:10:45 +0100 |
| |
Michael Stone <michael@laptop.org> writes:
> For the sake of discussion, I have written up and documented one possible > implementation of this concept based on the idea of a new rlimit named > RLIMIT_NETWORK in the following patch series. > > I eagerly await your questions, comments, suggestions, and improvements.
At least for outgoing packets you could already do it using the netfilter owner match and a suitable uid. I suppose that could be also extended for incoming packets.
-Andi -- ak@linux.intel.com
| |