Re: [PATCH] LSM networking: tcp hooks for 2.5.59 (8/8)

[James Morris <jmorris@xxxxxxxxxxxxxxxx>]

On Thu, 30 Jan 2003, David S. Miller wrote:

> If you think this is implementable, then I'll happily accept the
> net/socket.c stuff and even the af_unix hack, with the assumption
> being that the rest can be handled by netfilter or something similar.
> Oh yes, I'd also take the netlink capability thing too as long as it
> was inlined properly for the no-security case.

Explicitly labeled networking and the SELinux extended sockets API
probably can't be supported with just these hooks and Netfilter.

However, this subset of the networking hooks will still be very useful in
general, and we'll rework the patch accordingly.


- James
-- 
James Morris
<jmorris@xxxxxxxxxxxxxxxx>