From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1753461AbYJTMGw (ORCPT ); Mon, 20 Oct 2008 08:06:52 -0400 Received: (majordomo@vger.kernel.org) by vger.kernel.org id S1751986AbYJTMGn (ORCPT ); Mon, 20 Oct 2008 08:06:43 -0400 Received: from mail.collax.com ([82.194.105.242]:59107 "EHLO mail.collax.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1751864AbYJTMGm (ORCPT ); Mon, 20 Oct 2008 08:06:42 -0400 Message-ID: <48FC744F.6030507@collax.com> Date: Mon, 20 Oct 2008 14:06:39 +0200 From: Tilman Baumann User-Agent: Mozilla-Thunderbird 2.0.0.14 (X11/20080509) MIME-Version: 1.0 To: Casey Schaufler CC: Linux-Kernel , linux-security-module@vger.kernel.org Subject: Re: SMACK netfilter smacklabel socket match References: <48DBC9A1.20900@collax.com> <48DC5A45.8020801@schaufler-ca.com> <48DDBE2E.3010006@schaufler-ca.com> <48E1007F.4000400@collax.com> <48E19D01.9050809@schaufler-ca.com> <48E35F36.4030203@collax.com> <48E3957A.7040201@schaufler-ca.com> <48E3AB97.8020305@collax.com> <48E3BFDE.7010300@schaufler-ca.com> <48EA0B30.6080907@collax.com> <48EACC91.8040008@schaufler-ca.com> <48F8C3EC.1030607@collax.com> <48F8D122.3010105@schaufler-ca.com> In-Reply-To: <48F8D122.3010105@schaufler-ca.com> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit X-Filtered: By ProxSMTP X-Anti-Virus: Kaspersky Anti-Virus for MailServers 5.5.33/RELEASE, bases: 20102008 #1186047, status: clean Sender: linux-kernel-owner@vger.kernel.org List-ID: X-Mailing-List: linux-kernel@vger.kernel.org Casey Schaufler wrote: > Tilman Baumann wrote: >> Hi Casey, >> >> the last weeks I tried to come up with some way to circumvent my >> problems by aimlessly poking around in the code. Did not work though. >> Not yet at least. :) >> Maybe it makes more sense for me to wait until you have a solution. >> My whole project is stalled right now because of this and I'm not sure >> what next. >> Do you plan to change something there soon? If so I would stop wasting >> my time with hopeless attempts. >> >> My problem is at the moment that I don't really know what to do. If >> you can give some aim I would be glad if I could do something. > > Well, the good news is that I have a change under test that will address > your needs, allowing a host or set of hosts to be generally accessible > from the Smack system. The bad news is that it uses a set of netlabel > apis that are not going to get released in favor of a redesigned set of > apis which are not available yet. The good news is that those apis will > handle Smack's needs just fine, but again the bad news is that I don't > have them to use yet. > > If you're up to trying out something that you know is going to get > rewhacked before it goes in anywhere let me know. Sure. I will be happy to use that. Just tell me where to find it and how to use it and what I should look out for. -- Tilman Baumann Software Developer Collax GmbH . Boetzinger Strasse 60 . 79111 Freiburg . Germany p: +49 (0) 89-990157-0 f: +49 (0) 89-990157-11 Geschaeftsfuehrer: William K. Hite / Boris Nalbach AG Muenchen HRB 158898, Ust.-IdNr: DE 814464942