> On Mon, 16 Aug 2004, Serge Hallyn wrote: > > > Attached is a proposed patch to allow LSM's to hide the existance of > > network interfaces. This appears to require more than one pair of > > hooks. The netdev_* hooks are generic network device hooks. The inet_* > > hooks are for internet devices. The latter know about device aliases, > > such as eth0:0. > > What security purpose does it serve to hide the existence of a network > interface? > > I don't think this patch has much chance of upstream acceptance. Is this the generally accepted view? My hope was that the fact that these will not affect networking performance would make them more acceptable. Is there a different approach which people think would be more acceptable, by either being less intrusive, or by providing benefits to other LSM's? thanks, -serge
This archive was generated by hypermail 2.1.3 : Tue Aug 24 2004 - 16:29:23 PDT