New skb extension for use by LSMs (skb "security blob")?
Casey Schaufler
casey at schaufler-ca.com
Thu Aug 22 21:59:37 UTC 2019
On 8/22/2019 2:18 PM, David Miller wrote:
> From: Casey Schaufler <casey at schaufler-ca.com>
> Date: Thu, 22 Aug 2019 13:35:01 -0700
>
>> If the secmark where replaced by a security blob, the u32 secmark field
>> in an sk_buff would be replaced by a void * security field.
> You can already use the secmark to hash to some kind of pointer or other
> object.
Would you really want that used in the most common configuration?
Sure, you *can* do that, but it would be insane to do so.
More information about the Linux-security-module-archive
mailing list