Re: [patch] Socket Receive Hook

Previous message: Jesse Pollard: "Re: Possible system call interface for LSM"
In reply to: Greg KH: "Re: [patch] Socket Receive Hook"
Next in thread: Stephen Smalley: "Re: [patch] Socket Receive Hook"
Next in thread: Greg KH: "Re: [patch] Socket Receive Hook"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

jmorrisat_private

On Fri, 10 Aug 2001, Greg KH wrote:

>
> I don't understand, are you saying Chris's proposed hook allows you to
> do this, or doesn't allow it?  And if not, should this patch not be
> applied?
>

Yes, this kind of check can be done at this hook, and I was noting that
developers should propagate IP header information up via the skb blob
rather than poking around the skb payload looking for the IP header at
this point.

It's about using the hook, rather than the hook itself (which seems
perfectly fine).

- James
-- 
James Morris
<jmorrisat_private>

_______________________________________________
linux-security-module mailing list
linux-security-moduleat_private
http://mail.wirex.com/mailman/listinfo/linux-security-module