From mboxrd@z Thu Jan 1 00:00:00 1970 From: James Morris Subject: Re: Refactor Netlink connector? Date: Sat, 27 May 2006 13:21:05 -0400 (EDT) Message-ID: References: <20060527134629.GA16306@2ka.mipt.ru> Mime-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Cc: netdev@vger.kernel.org, "David S. Miller" , tgraf@suug.ch, Stephen Smalley Return-path: Received: from mail2.sea5.speakeasy.net ([69.17.117.4]:29393 "EHLO mail2.sea5.speakeasy.net") by vger.kernel.org with ESMTP id S964911AbWE0RVI (ORCPT ); Sat, 27 May 2006 13:21:08 -0400 To: Evgeniy Polyakov In-Reply-To: Sender: netdev-owner@vger.kernel.org List-Id: netdev.vger.kernel.org On Sat, 27 May 2006, James Morris wrote: > One of the problems is that different Netlink protocols bury their > commands at different levels, so the SELinux code has to know how how deep > to dig (and then do the digging) to determine exactly which command is > being called. Actually, a possible solution here is to completely remove all internal knowledge of netlink messages from SELinux and have the netfilter framework and protocols provide methods to determine message types and permissions. One of the issues still to resolve for SELinux and generic netlink is that we don't know what the netlink protocol for the socket really is until messages are sent over it, so some socket-level perms for NETLINK_GENERIC will have to be handed out to all potential users (although actual transfer of data can be mediated at a finer granularity). - James -- James Morris