Messages in this thread | | | Date | Fri, 1 Jan 2010 15:31:01 +0100 | From | Pavel Machek <> | Subject | Re: [PATCH 2/3] Security: Implement disablenetwork semantics. (v4) |
| |
> Quoting Michael Stone (michael@laptop.org): > > Implement security_* hooks for socket_create, socket_bind, socket_connect, > > socket_sendmsg, and ptrace_access_check which return -EPERM when called from a > > process with networking restrictions. Exempt AF_UNIX sockets. > > > > Signed-off-by: Michael Stone <michael@laptop.org> > > Acked-by: Serge Hallyn <serue@us.ibm.com>
For the record: NAK, as it introduces security holes. Pavel
-- (english) http://www.livejournal.com/~pavelmachek (cesky, pictures) http://atrey.karlin.mff.cuni.cz/~pavel/picture/horses/blog.html
| |