New skb extension for use by LSMs (skb "security blob")?

David Miller davem at davemloft.net
Thu Aug 22 21:18:45 UTC 2019


From: Casey Schaufler <casey at schaufler-ca.com>
Date: Thu, 22 Aug 2019 13:35:01 -0700

> If the secmark where replaced by a security blob, the u32 secmark field
> in an sk_buff would be replaced by a void * security field.

You can already use the secmark to hash to some kind of pointer or other
object.



More information about the Linux-security-module-archive mailing list