[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date: Thu, 3 Mar 2011 12:17:26 -0800
From: Chris Wright <chrisw@...s-sol.org>
To: Chris Wright <chrisw@...s-sol.org>
Cc: Patrick McHardy <kaber@...sh.net>, NetDev <netdev@...r.kernel.org>,
dm-devel@...hat.com, "David S. Miller" <davem@...emloft.net>,
"linux-security-module@...r.kernel.org"
<linux-security-module@...r.kernel.org>, drbd-dev@...ts.linbit.com
Subject: Re: [PATCH 2/2] netlink: kill eff_cap from struct netlink_skb_parms
* Chris Wright (chrisw@...s-sol.org) wrote:
> Ideally, we'd consolidate those into a variant of security_netlink_recv().
> However the issue is with types. Inside connector callback we only have
> netlink_skb_params (seems inapproriate to cast back out to skb).
>
> We could change the lsm hook to only pass nsp, but SELinux actually
> cares about the netlink type. Any ideas?
Actually I misremembered, it only cares on the send path.
We could completely drop skb from recv lsm hook, will send an RFC
momentarily with example.
thanks,
-chris
--
To unsubscribe from this list: send the line "unsubscribe netdev" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html
Powered by blists - more mailing lists