Re: [PATCH] selinux: add a skb_owned_by() hook

Paul Moore
2013-04-09T11:39:57Z

On Tuesday, April 09, 2013 12:41:44 AM David Miller wrote:
> It makes sure SYN/ACKs have a socket context attached to the
> packet, which only LSMs actually need.
>
> You participated in the thread where this stuff was discussed and the
> initial version of this patch was posted, so this patch, or any aspect
> of it, should not be a mystery.

Casey, and the LSM list as a whole, was not included in the entire thread as
when I first posted my original patch I believed the "mergeable" fix was going
to be self contained within the network stack.

For Casey, and others on the LSM list, here is a pointer to the original
thread which started on netdev. Enjoy.

* http://marc.info/?t=136543607500006&r=1&w=2

--
paul moore
security and virtualization @ redhat