> > I've read through and tested the patch, and is seems like a reasonable
> > idea. Basically, it adds a flag to sockets which have been created
> > via an accept() and then adds a new getcred_outgoing sysctl which
> > works just like getcred but returns EPERM it is not a outgoing
> > socket.
> I think this is the wrong way around. There is enough information in
> the PCB dump for identd to determine whether the socket was active- or
> passive-open; identd should do the work itself.
I presume you mean that getcred_outgoing should do the work itself
rather than having identd grovel around in the kernel itself? Can
you point me at the field(s) in inpcb I should be looking at?
David.
To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-net" in the body of the message
