lists  /  announce  owl-users  owl-dev  john-users  john-dev  passwdqc-users  yescrypt  popa3d-users  /  oss-security  kernel-hardening  musl  sabotage  tlsify  passwords  /  crypt-dev  xvendor  /  Bugtraq  Full-Disclosure  linux-kernel  linux-netdev  linux-ext4  linux-hardening  PHC 
Open Source and information security mailing list archives
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date:	Tue, 22 Apr 2014 13:31:13 -0700
From:	Andy Lutomirski <>
To:	David Miller <>
Cc:	Vivek Goyal <>,
	"" <>,,
	Network Development <>,
	Tejun Heo <>, Simo Sorce <>,,,
	Daniel Walsh <>
Subject: Re: [PATCH 0/2] net: Implement SO_PEERCGROUP and SO_PASSCGROUP socket options

On Tue, Apr 22, 2014 at 1:29 PM, David Miller <> wrote:
> From: Andy Lutomirski <>
> Date: Tue, 22 Apr 2014 13:08:59 -0700
>> On Tue, Apr 22, 2014 at 1:05 PM, David Miller <> wrote:
>>> From: Vivek Goyal <>
>>> Date: Tue, 15 Apr 2014 17:15:44 -0400
>>>> This is another version of patchset to add support passing cgroup
>>>> information of client over unix socket API.
>>> I'm marking this patch series as "changes requested" in patchwork
>>> because if we still end up adding this feature SO_PASSCGROUP needs to
>>> be changed to behave like SO_PASSCRED.
>>> Specifically, like SO_PASSCRED, it should pass the "real" cgroup, ie.
>>> the cgroup at socket open() time.
>> I suspect that making this change will render it useless,
>> unfortunately.  I really want to understand the use case.
> There was no use case, it is simply the fact that when I discussed this
> feature with Vivek and Simo I told them that it should be implemented
> the same as the existing credential facilities.
> For datagram situations there is no "peer" to consider in between
> sendmsg() calls, as the binding is only active during the sendmsg()
> call.
> That's why SO_PASSCRED exists in the first place.
> Otherwise, without SO_PASSCGROUP, there is no way for datagram sockets
> to find out the peer's open() time cgroup.


I'd still like to know what userspace applications want this feature.
The canonical example seems to be journald, but journald doesn't use
unix datagram sockets AFAICS, nor is the process that opened the
socket interesting (that process is always systemd).


Andy Lutomirski
AMA Capital Management, LLC
To unsubscribe from this list: send the line "unsubscribe netdev" in
the body of a message to
More majordomo info at

Powered by blists - more mailing lists