Re: Low-level network hooks and rtnetlink

chrisat_private

* James Morris (jmorrisat_private) wrote:
> 
> 3. Change the abstraction and present a consistent API to the LSM module
> developer.  This would mean going down below the ioctl() and rtnetlink
> levels and putting in fine-grained hooks based on the actual operation
> being interposed.  So, rather than the example above, accesses via both
> the ioctl() and rtnetlink paths would call the same hooks in netdev_ops,
> say:
> 
> netdev_ops->getmtu();
> netdev_ops->setmtu();
> netdev_ops->setaddr();
> netdev_ops->getaddr();

i think this is the better solution.

-chris

_______________________________________________
linux-security-module mailing list
linux-security-moduleat_private
http://mail.wirex.com/mailman/listinfo/linux-security-module