Re: [PATCH] LSM networking update: summary (0/5)

["David S. Miller" <davem@xxxxxxxxxx>]

   From: "Makan Pourzandi (LMC)" <Makan.Pourzandi@xxxxxxxxxxx>
   Date: Fri, 7 Feb 2003 11:58:49 -0500 

   Actually, we know that based on FIPS documents
   (http://csrc.nist.gov/publications/fips/fips188/fips188.ps) we can
   use ip options for security purposes. I believe for my part that
   this hook can be useful if used to decode ip options and decide to
   drop or not the ip packets. I don't believe that this level of
   control can be achieved using other hooks at socket layer. 

James added a hook for SKB reception, you can do whatever you
want in analzying incoming packet contents using that generic
hook.