Re: [PATCH 1/1] Add post accept()/recvmsg() hooks.

2007-07-05 Thread Paul Moore
On Tuesday, July 3 2007 8:07:45 am Tetsuo Handa wrote: diff -ur a/include/linux/security.h b/include/linux/security.h --- a/include/linux/security.h2007-07-03 10:07:14.0 +0900 +++ b/include/linux/security.h2007-07-03 13:21:20.581744544 +0900 @@ -745,6 +745,16 @@ *

Re: [PATCH 1/1] Add post accept()/recvmsg() hooks.

2007-07-05 Thread Tetsuo Handa
Thank you for your suggestion. Paul Moore wrote: I believe the existing security_inet_conn_request() LSM hook should allow you to do what you want. Adding another hook _after_ the inbound connection has been accepted is probably a bad idea. Unfortunately, security_inet_conn_request() doesn't