lkml.org 
[lkml]   [2009]   [Dec]   [24]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
    /
    From
    SubjectRe: [PATCH 1/3] Security: Add prctl(PR_{GET,SET}_NETWORK) interface. (v3)
    Date
    Michael Stone <michael@laptop.org> writes:

    > diff --git a/include/linux/sched.h b/include/linux/sched.h
    > index f2f842d..0c65c55 100644
    > --- a/include/linux/sched.h
    > +++ b/include/linux/sched.h
    > @@ -1402,6 +1402,8 @@ struct task_struct {
    > unsigned int sessionid;
    > #endif
    > seccomp_t seccomp;
    > +/* Flags for limiting networking via prctl(PR_SET_NETWORK). */
    > + unsigned long network;
    >
    > /* Thread group tracking */
    > u32 parent_exec_id;

    I think this is unnecessary, as LSM module, you should use the
    void* security member of the structure cred.

    this member allows you to mark task_struct as you which, it's a kind of
    abstraction provided to all security modules.


    \
     
     \ /
      Last update: 2009-12-24 06:13    [W:4.980 / U:0.088 seconds]
    ©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site