Re: New skb extension for use by LSMs (skb "security blob")?
- From
- David Miller <davem@davemloft.net>
- Date
- 2019-08-22 22:29:02
- Also in
- linux-security-module, selinux
- Reply to
- Casey Schaufler, 2019-08-22
From: Casey Schaufler <casey@schaufler-ca.com> Date: Thu, 22 Aug 2019 14:59:37 -0700
Sure, you *can* do that, but it would be insane to do so.
We look up the neighbour table entries on every single packet we
transmit from the kernel in the same exact way.
And it was exactly to get rid of a pointer in a data structure.