Nicolas Williams writes:
> > Nothing, except that this doesn't give the answer that Darren wants,
> > either.  You'll see the global zone ID in packets that are related to
> > non-global zones.  (E.g., for the ECHO-REPLY message to an inbound
> > ECHO matching a non-global zone's IP address.)
> 
> That's why I said zcred, not kcred :)

zcred doesn't do what you're expecting if you're not in a process
context.

> Of course, that does nothing about input packets -- like Darren says the
> classifier would have to find the right cred_t.

Right ... like the ICMP example I gave above.

-- 
James Carlson, KISS Network                    <[EMAIL PROTECTED]>
Sun Microsystems / 1 Network Drive         71.232W   Vox +1 781 442 2084
MS UBUR02-212 / Burlington MA 01803-2757   42.496N   Fax +1 781 442 1677
_______________________________________________
networking-discuss mailing list
[email protected]

Reply via email to