Messages in this thread | | | From | Samir Bellabes <> | Subject | Re: [PATCH 1/3] Security: Add prctl(PR_{GET,SET}_NETWORK) interface. (v3) | Date | Thu, 24 Dec 2009 05:38:30 +0100 |
| |
Michael Stone <michael@laptop.org> writes:
> diff --git a/include/linux/sched.h b/include/linux/sched.h > index f2f842d..0c65c55 100644 > --- a/include/linux/sched.h > +++ b/include/linux/sched.h > @@ -1402,6 +1402,8 @@ struct task_struct { > unsigned int sessionid; > #endif > seccomp_t seccomp; > +/* Flags for limiting networking via prctl(PR_SET_NETWORK). */ > + unsigned long network; > > /* Thread group tracking */ > u32 parent_exec_id;
I think this is unnecessary, as LSM module, you should use the void* security member of the structure cred.
this member allows you to mark task_struct as you which, it's a kind of abstraction provided to all security modules.
| |