Choosing A Webhost:
A web hosting service is a type of Internet hosting service that allows individuals and organizations to provide their own website accessible via the World Wide Web. Web hosts are companies that provide space on a server they own for use by their clients as well as providing Internet connectivity, typically in a data center. Web hosts can also provide data center space and connectivity to the Internet for servers they do not own to be located in their data center, called colocation. more...
|
RE: Limiting IPC with SELinux?: msg#00208
|
Subject: |
RE: Limiting IPC with SELinux? |
On Mon, 25 Apr 2005, Stephen Smalley wrote:
> Actually, Thomas Bleher's suggestion of extending the ipt owner module
> might be better.
The upstream module only works for outgoing packets, and also imposes some
heavy locking.
For outgoing packets we already have the security context via the owning
socket, and for incoming packets we probably need to hook sock_rcv_skb.
In any case, I didn't understand the idea of adding a permission for all
matches, when the SELinux code doesn't understand why the packet was being
matched or what is supposed to happen to it.
- James
--
James Morris
<jmorris@xxxxxxxxxx>
|
| |
