Messages in this thread | | | From | kuznet@ms2 ... | Subject | Re: LSF and SOCK_PACKET | Date | Thu, 15 Oct 1998 22:32:23 +0400 (MSK DST) |
| |
Hello!
> In short it should be commented out or moved to "CONFIG_VERY_EXPERIMENTAL" > for 2.2.0 and check CAP_NET_RAW ?
It is too useful on packet socket to be put to experiamntal section. It should be on by default really.
Actually, only the fact that it allows user to filter tcp segments and to mangle(!) lengths of tcp packets is enough to prohibit its not-privileged usage. At least, it apparently gives user nice ways to confuse our tcp stack.
Diagnosis is CAP_NET_RAW.
Alexey
- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.rutgers.edu Please read the FAQ at http://www.tux.org/lkml/
| |