lkml.org 
[lkml]   [1998]   [Oct]   [15]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
From
SubjectRe: LSF and SOCK_PACKET
Date
Hello!

> In short it should be commented out or moved to "CONFIG_VERY_EXPERIMENTAL"
> for 2.2.0 and check CAP_NET_RAW ?

It is too useful on packet socket to be put to experiamntal section.
It should be on by default really.

Actually, only the fact that it allows user to filter tcp segments
and to mangle(!) lengths of tcp packets is enough to prohibit
its not-privileged usage. At least, it apparently gives user
nice ways to confuse our tcp stack.

Diagnosis is CAP_NET_RAW.

Alexey

-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.rutgers.edu
Please read the FAQ at http://www.tux.org/lkml/

\
 
 \ /
  Last update: 2005-03-22 13:45    [W:0.070 / U:1.028 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site