David Miller wrote:
> > Octavian Purdila wrote:
> >> 
> >> int inet_is_reserved_local_port(int port)
> >> {
> >>    if (test_bit(port, reserved_ports))
> >>            return 1;
> >>    return 0;
> >> }
> >> 
> > Above check is exactly what I'm doing in the LSM hook.
> 
> But his version can be done inline in 2 or 3 instructions.
> 
> An LSM hook will result in an indirect function call,
> all live registers spilled to the stack, then all of
> those reloaded when the function returns.
> 
> It will be much more expensive.

If you can accept his version, I want to use his version (with an interface for
updating above "reserved_ports" by not only root user's sysctl() but also MAC's
policy configuration).
--
To unsubscribe from this list: send the line "unsubscribe linux-rdma" in
the body of a message to [email protected]
More majordomo info at  http://vger.kernel.org/majordomo-info.html

Reply via email to