netdev - [PATCH 0/6] netlink: expose policies to userspace

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-Id: <20190426121306.10871-1-johannes@sipsolutions.net>
Date:   Fri, 26 Apr 2019 14:13:00 +0200
From:   Johannes Berg <johannes@...solutions.net>
To:     netdev@...r.kernel.org
Cc:     David Ahern <dsa@...ulusnetworks.com>,
        Pablo Neira Ayuso <pablo@...filter.org>
Subject: [PATCH 0/6] netlink: expose policies to userspace

Make some cleanups in policy validation, and add tools to expose
the policies to userspace.

This lets userspace discover what the appropriate data for an
element is.

Note that NLA_UNSPEC items are omitted as they're rejected in
strict validation mode so their policy entries should be changed
to NLA_MIN_LEN - this is just a representation change.

Eventually, I'd like to add a separation between input and output
policies (currently only the input policy is exposed), but that
needs some extra work to add "overrides".

johannes