lkml.org 
[lkml]   [2010]   [Jan]   [1]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
    /
    Date
    From
    SubjectRe: [PATCH 2/3] Security: Implement disablenetwork semantics. (v4)
    > Quoting Michael Stone (michael@laptop.org):
    > > Implement security_* hooks for socket_create, socket_bind, socket_connect,
    > > socket_sendmsg, and ptrace_access_check which return -EPERM when called from a
    > > process with networking restrictions. Exempt AF_UNIX sockets.
    > >
    > > Signed-off-by: Michael Stone <michael@laptop.org>
    >
    > Acked-by: Serge Hallyn <serue@us.ibm.com>

    For the record: NAK, as it introduces security holes.
    Pavel

    --
    (english) http://www.livejournal.com/~pavelmachek
    (cesky, pictures) http://atrey.karlin.mff.cuni.cz/~pavel/picture/horses/blog.html


    \
     
     \ /
      Last update: 2010-01-01 15:33    [W:0.020 / U:0.348 seconds]
    ©2003-2016 Jasper Spaans. hosted at Digital OceanAdvertise on this site