Re: [PATCH 0/5] Return fds from privileged sockhash/sockmap lookup

On Fri, Mar 20, 2020 at 8:12 AM Lorenz Bauer [off-list ref] wrote:

Another way around this might be to add a way to go from socket cookie to
socket, and not touch sockmap. I suspect that is an even steeper hill to climb,
especially if it means adding a new syscall.

I think receiving socket FD from socket cookie would be much better approach.
It's clean layering and security folks will enforce that bit of api
individually.
New syscall is not hard to add.
man pages, docs are needed regardless.