Hello.

Hao Xu wrote:
> If the purpose of the LSM framework is not just satisfying selinux, then
I also want LSM framework add some hooks.

The problems are at accept() and recvmsg() operation.
I want to return error on security_socket_post_accept().
I want a new hook security_socket_post_recvmsg() that are called AFTER 
sock_recvmsg() is called.
http://tomoyo.sourceforge.jp/cgi-bin/lxr/source/net/socket.c#L640
http://tomoyo.sourceforge.jp/cgi-bin/lxr/source/net/socket.c#L1404

By the way, I'm going to have a session about TOMOYO Linux
at Embedded Linux Conference 2007 (http://www.celinux.org/elc2007/)
and Linux Symposium 2007 
(http://www.linuxsymposium.org/2007/speakers.php?types=bofs).
If you can attend them, please come and see TOMOYO Linux.

Thanks.
-
To unsubscribe from this list: send the line "unsubscribe 
linux-security-module" in
the body of a message to [EMAIL PROTECTED]
More majordomo info at  http://vger.kernel.org/majordomo-info.html

Reply via email to