Re: New skb extension for use by LSMs (skb "security blob")?
- From
- Florian Westphal <fw@strlen.de>
- Date
- 2019-08-22 07:04:01
- Also in
- linux-security-module, selinux
- Reply to
- Paul Moore, 2019-08-21
Paul Moore [off-list ref] wrote:
Hello netdev, I was just made aware of the skb extension work, and it looks very appealing from a LSM perspective. As some of you probably remember, we (the LSM folks) have wanted a proper security blob in the skb for quite some time, but netdev has been resistant to this idea thus far.
Is that "blob" in addition to skb->secmark, or a replacement?