linux-kernel - Re: [RFC] vtunerc: virtual DVB device - is it ok to NACK driver because of worrying about possible misusage?

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <20111212103120.0494405e@pyramind.ukuu.org.uk>
Date:	Mon, 12 Dec 2011 10:31:20 +0000
From:	Alan Cox <alan@...rguk.ukuu.org.uk>
To:	Peter martin <peter@...adhome.com>
Cc:	linux-kernel@...r.kernel.org
Subject: Re: [RFC] vtunerc: virtual DVB device - is it ok to NACK driver
 because of worrying about possible misusage?

> I don't know enough about kernel modules doing networking, but do the 
> packets go through the iptables route, and do things like DSCP still get 
> taken note of?

If you go via the kernel tcp/ip stack then you'll get kernel iptables
rules, but you'd probably still want to add more security in many
environments, which means SSL which means user space and you are back to
not needing vtuner again.

Alan
--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/