Re: New skb extension for use by LSMs (skb "security blob")?
- From
- David Miller <davem@davemloft.net>
- Date
- 2019-08-22 21:18:47
- Also in
- linux-security-module, selinux
- Reply to
- Casey Schaufler, 2019-08-22
From: Casey Schaufler <casey@schaufler-ca.com> Date: Thu, 22 Aug 2019 13:35:01 -0700
If the secmark where replaced by a security blob, the u32 secmark field in an sk_buff would be replaced by a void * security field.
You can already use the secmark to hash to some kind of pointer or other
object.