Re: [PATCH] BSD Jail LSM (2/3)

Quoting Alan Cox (alan@lxorguk.ukuu.org.uk):

On Llu, 2004-09-13 at 00:33, Serge E. Hallyn wrote:

quoted

Right now one must choose between either an ipv4 or ipv6 interface.
Is typical ipv6 usage such that it would be preferable to be able to
specify one of each?  

Its normal to have both yes.

A more interesting question is whether all of the "which socket for
which use" stuff could be addressed by netfilter chains run at
bind/connect time ?

You mean to add two new netfilter hooks?  Would these then replace the
LSM hooks?

-serge