* [kernel-hardening] networking restrictions
@ 2011-07-29 9:09 Vasiliy Kulikov
0 siblings, 0 replies; only message in thread
From: Vasiliy Kulikov @ 2011-07-29 9:09 UTC (permalink / raw)
To: kernel-hardening
Hi,
Looks like it touches the restrictions of per net_ns socket
creation/usage:
https://lwn.net/Articles/368730/
However, I want to implement it as a cgroup policy similar to device
creation/usage restriction. AFAICS, cgroup was not suggested in the
topic.
Thanks,
--
Vasiliy
^ permalink raw reply [flat|nested] only message in thread
only message in thread, other threads:[~2011-07-29 9:09 UTC | newest]
Thread overview: (only message) (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2011-07-29 9:09 [kernel-hardening] networking restrictions Vasiliy Kulikov
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox