New skb extension for use by LSMs (skb "security blob")?

Florian Westphal fw at strlen.de
Thu Aug 22 07:03:58 UTC 2019


Paul Moore <paul at paul-moore.com> wrote:
> Hello netdev,
> 
> I was just made aware of the skb extension work, and it looks very
> appealing from a LSM perspective.  As some of you probably remember,
> we (the LSM folks) have wanted a proper security blob in the skb for
> quite some time, but netdev has been resistant to this idea thus far.

Is that "blob" in addition to skb->secmark, or a replacement?



More information about the Linux-security-module-archive mailing list