Re: skb->security and friends

From: James Morris (jmorrisat_private)
Date: Fri Oct 26 2001 - 22:58:22 PDT

  • Next message: Andi Kleen: "Re: skb->security and friends"

    On Fri, 26 Oct 2001, Andi Kleen wrote:
    
    > security is basically on its way out; it was for a never completely merged
    > ipsec implementation from the fi/sinus firewalls guys and is largely bitrotted
    > now (e.g. a lot of stack modules won't maintain it correctly anymore and
    > probably never have)
    > If you wanted to use it you would need to fix it first.
    
    [note: lsm added to the cc list]
    
    I was hoping that skb->security could be reassigned as a void pointer
    for use by LSM in 2.5, if LSM is accepted into the kernel.
    
    This would be used by LSM modules for maintaining security attributes
    between layers.  Note that this may also be useful for Freeswan, as it
    should be possible now to implement ipsec as an LSM module.
    
    - James
    -- 
    James Morris
    <jmorrisat_private>
    
    
    
    _______________________________________________
    linux-security-module mailing list
    linux-security-moduleat_private
    http://mail.wirex.com/mailman/listinfo/linux-security-module
    



    This archive was generated by hypermail 2b30 : Fri Oct 26 2001 - 23:00:47 PDT