Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1161004AbWBTQ1B (ORCPT ); Mon, 20 Feb 2006 11:27:01 -0500 Received: (majordomo@vger.kernel.org) by vger.kernel.org id S1161005AbWBTQ1B (ORCPT ); Mon, 20 Feb 2006 11:27:01 -0500 Received: from mail7.sea5.speakeasy.net ([69.17.117.9]:62375 "EHLO mail7.sea5.speakeasy.net") by vger.kernel.org with ESMTP id S1161004AbWBTQ1A (ORCPT ); Mon, 20 Feb 2006 11:27:00 -0500 Date: Mon, 20 Feb 2006 11:26:56 -0500 (EST) From: James Morris X-X-Sender: jmorris@excalibur.intercode To: =?iso-8859-1?q?T=F6r=F6k_Edwin?= cc: netfilter-devel@lists.netfilter.org, fireflier-devel@lists.sourceforge.net, linux-kernel@vger.kernel.org, martinmaurer@gmx.at, Patrick McHardy Subject: Re: [PATCH 2.6.15.4 1/1][RFC] ipt_owner: inode match supporting both incoming and outgoing packets In-Reply-To: <200602181410.59757.edwin.torok@level7.ro> Message-ID: References: <200602181410.59757.edwin.torok@level7.ro> MIME-Version: 1.0 Content-Type: MULTIPART/MIXED; BOUNDARY="537529445-1169445822-1140452646=:21034" Content-ID: Sender: linux-kernel-owner@vger.kernel.org X-Mailing-List: linux-kernel@vger.kernel.org Content-Length: 1335 Lines: 39 This message is in MIME format. The first part should be readable text, while the remaining parts are likely unreadable without MIME-aware tools. --537529445-1169445822-1140452646=:21034 Content-Type: TEXT/PLAIN; CHARSET=ISO-8859-1 Content-Transfer-Encoding: 8BIT Content-ID: On Sat, 18 Feb 2006, T?r?k Edwin wrote: > This is a patch based on Luke Kenneth Casson Leighton's patch [1] > One problem with that patch was that it couldn't be used for filtering > incoming packets, due to the fact that more than one process can listen on > the same socket ([2],[3]). Have a look at my skfilter patches: http://people.redhat.com/jmorris/selinux/skfilter/kernel/ These implement a scheme for matching incoming packets against sockets by adding a new hook in the socket layer. For upstream merge, the issues are: - should the new socket hook be used for all incoming packets? - ensure IP queuing still works Patrick: any other issues? - James -- James Morris --537529445-1169445822-1140452646=:21034-- - To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/