Re: [patch] update: _working_ code to add device+inode check to ipt_owner.c

[Luke Kenneth Casson Leighton]

On Thu, Sep 09, 2004 at 04:41:44PM -0700, Chris Wright wrote:

> > are the sockets in the interrupt context somehow different / special
> > such that they would never get to this code?
> 
> Depends on where the hooks are registered into netfilter whether you'll
> get the inbound stuff.  

 eek!

 e.g. ip_queue definitely gets it because fireflier's userspace code
 is able to determine the program name [from the pid, and it then
 goes hunting through /proc *gibber*] on both incoming and outgoing
 packets.

-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/