Re: Proposal to automatically make the owner/user of an accepted socket the current process
Mouse <[email protected]> Fri, 6 Jun 2025 11:58:22 -0400 (EDT)
| Newsgroups | gmane.os.netbsd.devel.kernel,gmane.os.netbsd.devel.network |
|---|---|
| Message-ID | <[email protected]> |
> I can accept a TCP connection on an AF_INET socket, then take the > resulting file descriptor and transfer it to a completely unrelated > process using a control message on an AF_UNIX socket. That process > can be owned by a different user. What do you intend to happen to > the AF_INET socket that is passed in this way? Whatever the configuration calls for, of course. That can't be done with per-packet filtering. That's why I think per-packet filtering is a wrong place to try to satisfy this desire. /~\ The ASCII Mouse \ / Ribbon Campaign X Against HTML [email protected] / \ Email! 7D C8 61 52 5D E7 2D 39 4E F1 31 3E E8 B3 27 4B