From: Paul Moore <paul.moore@hp.com>
To: Joy Latten <latten@austin.ibm.com>
Cc: redhat-lspp@redhat.com, linux-audit@redhat.com, sgrubb@redhat.com
Subject: Re: auditing labeled ipsec
Date: Wed, 11 Oct 2006 16:58:07 -0400 [thread overview]
Message-ID: <452D5ADF.4020607@hp.com> (raw)
In-Reply-To: <1160599200.17737.54.camel@faith.austin.ibm.com>
Joy Latten wrote:
> Linux provides two apis to add/delete/manage SAs and spd.
> One is netlink which was extended to do key management. The
> other is pfkeyv2, which our setkey and racoon uses.
>
> With all that said, I am not able to figure out how to get "auid" from
> pfkeyv2? I can use NETLINK_CB(skb).loginuid to get it when netlink is
> used, but I don't think I can use this for pfkeyv2 since I am not using
> netlink headers. I am using pfkey message headers, such as sadb_msg,
> which don't include this.
>
> Any ideas or suggestions?
While it's been a looong time since I looked at PFKEY I believe you can get away
with plucking the loginuid from the current task, yes? no?
--
paul moore
linux security @ hp
next prev parent reply other threads:[~2006-10-11 20:58 UTC|newest]
Thread overview: 8+ messages / expand[flat|nested] mbox.gz Atom feed top
2006-10-11 20:40 auditing labeled ipsec Joy Latten
2006-10-11 20:58 ` Paul Moore [this message]
2006-10-11 21:43 ` [redhat-lspp] " Joy Latten
2006-10-11 22:23 ` Klaus Weidner
2006-10-12 12:36 ` [redhat-lspp] " Steve Grubb
2006-10-12 14:16 ` Paul Moore
2006-10-12 14:24 ` Steve Grubb
2006-10-13 21:34 ` Joy Latten
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=452D5ADF.4020607@hp.com \
--to=paul.moore@hp.com \
--cc=latten@austin.ibm.com \
--cc=linux-audit@redhat.com \
--cc=redhat-lspp@redhat.com \
--cc=sgrubb@redhat.com \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.