[Patch 1/1] updated: TCP/UDP getpeersec

2006-02-06 Thread Catherine Zhang
Hi, Updated as per James' comment. Catherine --- From: [EMAIL PROTECTED] This patch implements an application of the LSM-IPSec networking controls whereby an application can determine the label of the security association its TCP or UDP sockets are currently connected to via getsockopt and th

[Patch 1/1] updated: TCP/UDP getpeersec

2006-02-23 Thread Catherine Zhang
Hi, Updated as per Herbert's comment. Catherine --- From: [EMAIL PROTECTED] This patch implements an application of the LSM-IPSec networking controls whereby an application can determine the label of the security association its TCP or UDP sockets are currently connected to via getsockopt and

Re: [Patch 1/1] updated: TCP/UDP getpeersec

2006-02-06 Thread James Morris
On Mon, 6 Feb 2006, Catherine Zhang wrote: > > Hi, > > Updated as per James' comment. Looks good to me. Acked-by: James Morris <[EMAIL PROTECTED]> -- James Morris <[EMAIL PROTECTED]> - To unsubscribe from this list: send the line "unsubscribe netdev" in the body of a message to [EMAIL PRO

Re: [Patch 1/1] updated: TCP/UDP getpeersec

2006-02-10 Thread Joy Latten
Catherine, My mailer may have been acting up, but the from header of your email had [EMAIL PROTECTED] instead of [EMAIL PROTECTED] :-) > diff -puN security/selinux/hooks.c~lsm-secpeer security/selinux/hooks.c > --- linux-2.6.16-rc1/security/selinux/hooks.c~lsm-secpeer 2006-02-01 > 00:55:23.00

Re: [Patch 1/1] updated: TCP/UDP getpeersec

2006-02-15 Thread Catherine Zhang
Joy, Thanks for your comment and sorry for the delay. Did you mean a separate error code for 'null' context? The current code catches the case when the sid is SECSID_NULL, and returns ENOPROTOOPT. The question is whether we want to create a different error code for this case. Any suggestions?

Re: [Patch 1/1] updated: TCP/UDP getpeersec

2006-02-16 Thread netdev-owner
On Mon, Feb 06, 2006 at 12:12:31PM -0500, Catherine Zhang wrote: > > Updated as per James' comment. I don't quite understand how one actually uses this but it looks correct technically :) > diff -puN security/dummy.c~lsm-secpeer security/dummy.c > --- linux-2.6.16-rc1/security/dummy.c~lsm-secpee

Re: [Patch 1/1] updated: TCP/UDP getpeersec

2006-02-16 Thread Joy Latten
On Thu, 2006-02-16 at 01:30 -0500, Catherine Zhang wrote: > Joy, > > Thanks for your comment and sorry for the delay. Did you mean a > separate error code for 'null' context? The current code catches the > case when the sid is SECSID_NULL, and returns ENOPROTOOPT. The > question is whether we w

Re: [Patch 1/1] updated: TCP/UDP getpeersec

2006-03-08 Thread Herbert Xu
Catherine Zhang <[EMAIL PROTECTED]> wrote: > > From: [EMAIL PROTECTED] > > This patch implements an application of the LSM-IPSec networking > controls whereby an application can determine the label of the > security association its TCP or UDP sockets are currently connected to > via getsockopt an

Re: [Patch 1/1] updated: TCP/UDP getpeersec

2006-03-08 Thread David S. Miller
From: Herbert Xu <[EMAIL PROTECTED]> Date: Thu, 09 Mar 2006 11:33:19 +1100 > Catherine Zhang <[EMAIL PROTECTED]> wrote: > > > > From: [EMAIL PROTECTED] > > > > This patch implements an application of the LSM-IPSec networking > > controls whereby an application can determine the label of the > >

Re: [Patch 1/1] updated: TCP/UDP getpeersec

2006-03-08 Thread James Morris
On Wed, 8 Mar 2006, David S. Miller wrote: > I thought James still had some objections? > James? Is this the patch from a few weeks back? If so, it needs updating to support Unix datagram. - James -- James Morris <[EMAIL PROTECTED]> - To unsubscribe from this list: send the line "unsubscri

Re: [Patch 1/1] updated: TCP/UDP getpeersec

2006-03-08 Thread Xiaolan Zhang
Hi, James, I am working on a separate patch for Unix datagram, instead of mixing the two into one patch. thanks, Catherine James Morris <[EMAIL PROTECTED]> wrote on 03/08/2006 09:56:33 PM: > On Wed, 8 Mar 2006, David S. Miller wrote: > > > I thought James still had some objections? > > James?

Re: [Patch 1/1] updated: TCP/UDP getpeersec

2006-03-09 Thread David S. Miller
From: Xiaolan Zhang <[EMAIL PROTECTED]> Date: Wed, 8 Mar 2006 22:02:31 -0500 > I am working on a separate patch for Unix datagram, instead of mixing the > two into one patch. James, is this Ok with you? - To unsubscribe from this list: send the line "unsubscribe netdev" in the body of a message

Re: [Patch 1/1] updated: TCP/UDP getpeersec

2006-03-10 Thread David S. Miller
From: Herbert Xu <[EMAIL PROTECTED]> Date: Thu, 09 Mar 2006 11:33:19 +1100 > Acked-by: Herbert Xu <[EMAIL PROTECTED]> > > Dave, perhaps we should queue this for 2.6.17? Applied, thanks. - To unsubscribe from this list: send the line "unsubscribe netdev" in the body of a message to [EMAIL PROTECT