On Mon, 9 Jul 2007, Tetsuo Handa wrote:

> It drops messages from unwanted IP address/ports.
> (To be exact, it doesn't drop, it just tells userland process
> not to use received messages by returning errors.)

This is broken.

You need to properly fail the network operation and ensure that the peers 
are appropriately notified using the standard failure paths, not just 
arbitrarily propagate errors to the local user.



- James
-- 
James Morris
<[EMAIL PROTECTED]>
-
To unsubscribe from this list: send the line "unsubscribe 
linux-security-module" in
the body of a message to [EMAIL PROTECTED]
More majordomo info at  http://vger.kernel.org/majordomo-info.html

Reply via email to