From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id ; Wed, 5 Sep 2001 06:56:45 -0400 Received: (majordomo@vger.kernel.org) by vger.kernel.org id ; Wed, 5 Sep 2001 06:56:35 -0400 Received: from mercury.rus.uni-stuttgart.de ([129.69.1.226]:65033 "EHLO mercury.rus.uni-stuttgart.de") by vger.kernel.org with ESMTP id ; Wed, 5 Sep 2001 06:56:27 -0400 To: Andi Kleen Cc: linux-kernel@vger.kernel.org Subject: Re: getpeereid() for Linux In-Reply-To:

<20010905124807.A17035@gruyere.muc.suse.de> From: Florian Weimer Date: 05 Sep 2001 12:56:10 +0200 In-Reply-To: <20010905124807.A17035@gruyere.muc.suse.de> (Andi Kleen's message of "Wed, 5 Sep 2001 12:48:07 +0200") Message-ID: User-Agent: Gnus/5.090001 (Oort Gnus v0.01) Emacs/20.7 MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Sender: linux-kernel-owner@vger.kernel.org X-Mailing-List: linux-kernel@vger.kernel.org Andi Kleen writes: > SO_PEERCRED doesn't need any cooperation from the other end (at least > not for SOCK_STREAM) Thanks. Over here, SO_PEERCRED is documented in socket(7). ;-) > There is netfilter owner match, but it is a bad hack. I certainly don't want to give a user process the right to add netfilter rules dynamically. :-/ > I think you're better off with identd. Or some /proc parsing (which is probably what identd does, too). -- Florian Weimer Florian.Weimer@RUS.Uni-Stuttgart.DE University of Stuttgart http://cert.uni-stuttgart.de/ RUS-CERT +49-711-685-5973/fax +49-711-685-5898