Re: [PATCH] LSM networking update: summary (0/5)

Previous message: Miles Bader: "Re: [BK PATCH] LSM changes for 2.5.59"
In reply to: Makan Pourzandi (LMC): "RE: [PATCH] LSM networking update: summary (0/5)"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

davemat_private

   From: "Makan Pourzandi (LMC)" <Makan.Pourzandiat_private>
   Date: Fri, 7 Feb 2003 11:58:49 -0500 

   Actually, we know that based on FIPS documents
   (http://csrc.nist.gov/publications/fips/fips188/fips188.ps) we can
   use ip options for security purposes. I believe for my part that
   this hook can be useful if used to decode ip options and decide to
   drop or not the ip packets. I don't believe that this level of
   control can be achieved using other hooks at socket layer. 

James added a hook for SKB reception, you can do whatever you
want in analzying incoming packet contents using that generic
hook.
_______________________________________________
linux-security-module mailing list
linux-security-moduleat_private
http://mail.wirex.com/mailman/listinfo/linux-security-module