Re: How to check UID of process on the other side of local TCP/UDP connection

Glynn Clements <[email protected]> Wed, 29 Nov 2006 20:13:37 +0000
Newsgroups gmane.comp.security.linux
Message-ID <[email protected]>
Filipe Varela wrote:

> >> Anyways, I would prefer to stick with TCP/UDP, because this is  
> >> what my
> >> programs use already, and  I don't really want to change  
> >> everything to
> >> Unix sockets (unless of course Unix sockets are the only good way to
> >> resolve my problems).
> 
> I don't want to go off-topic but i have an important question. Isn't  
> a socket a concept that translates an address and port? How would  
> someone go about doing tcp/udp without sockets when they both depend  
> on address/port mappings which are _literally_ sockets?
> 
> Am i wrong?

I think that you misunderstood.

By "Unix sockets", he was referring to using Unix-domain sockets
(AF_LOCAL) rather than TCP/IP sockets (AF_INET).

Unix-domain sockets have the advantage that you can obtain the
identity (PID, UID, GID) of the peer from the OS.

-- 
Glynn Clements <[email protected]>