On Fri, 4 Oct 2002, Mike Wray wrote: > The module we are working on uses ip_fragment(), and ip_defragment(), > but not the others. Actually, I've just been looking at something else related to IP fragmentation and noticed that the ip_fragment() hook does not catch all (or even most) of the outgoing fragments. e.g. for UDP, fragments are copied via a callback directly out of userspace in ip_build_xmit(). The implementation of this hook will need a non-trivial overhaul. - James -- James Morris <jmorrisat_private> _______________________________________________ linux-security-module mailing list linux-security-moduleat_private http://mail.wirex.com/mailman/listinfo/linux-security-module
This archive was generated by hypermail 2b30 : Sat Oct 05 2002 - 09:31:05 PDT