Author: KyoungSoo Park <kyoungso@xxxxxxxxxxxxxxxx>
Date: Fri, 14 Jan 2005 15:51:08 -0500
Hi, I just want to ask a quick question. Is there any plan to support FreeBSD-like accept filter (http://www.freebsd.org/cgi/man.cgi?query=accf_http) for linux? If not, is there any glaring reason wh
Author: KyoungSoo Park <kyoungso@xxxxxxxxxxxxxxxx>
Date: Fri, 14 Jan 2005 21:22:53 -0500
yes. I agree that maybe an ugly hack to put that in the kernel. What I want to do is to support such feature leaving as little footprint as possible in the kernel, but specify whatever flexible polic
Seems easy to do if you can muck with the security hooks. The selinux folkk already have a monopoly on all those hooks. Look at selinux and security_socket_accept() and how you can hook up to it. You