Re: disablenetwork() syscall?

[James Morris <jmorris@xxxxxxxxxxxxxxxx>]

On Mon, 7 Jul 2003, Pekka Savola wrote:

> Hi,
> 
> In a bugtraq thread, DJ Bernstein brought up an idea which I'm not sure 
> has been brought up in the past.

Such a feature already exists in SELinux.

>  I'm not sure whether it's feasible or 
> not, but at least it (and other methods to limit the functions of a 
> user-level code) might bear consideration.

This is precisely what LSM is for, so new security models can be 
implemented without any direct effect on the core kernel.


- James
-- 
James Morris
<jmorris@xxxxxxxxxxxxxxxx>