You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

Catherine Zhang 877ce7c1b3 [AF_UNIX]: Datagram getpeersec ... This patch implements an API whereby an application can determine the label of its peer's Unix datagram sockets via the auxiliary data mechanism of recvmsg. Patch purpose: This patch enables a security-aware application to retrieve the security context of the peer of a Unix datagram socket. The application can then use this security context to determine the security context for processing on behalf of the peer who sent the packet. Patch design and implementation: The design and implementation is very similar to the UDP case for INET sockets. Basically we build upon the existing Unix domain socket API for retrieving user credentials. Linux offers the API for obtaining user credentials via ancillary messages (i.e., out of band/control messages that are bundled together with a normal message). To retrieve the security context, the application first indicates to the kernel such desire by setting the SO_PASSSEC option via getsockopt. Then the application retrieves the security context using the auxiliary data mechanism. An example server application for Unix datagram socket should look like this: toggle = 1; toggle_len = sizeof(toggle); setsockopt(sockfd, SOL_SOCKET, SO_PASSSEC, &toggle, &toggle_len); recvmsg(sockfd, &msg_hdr, 0); if (msg_hdr.msg_controllen > sizeof(struct cmsghdr)) { cmsg_hdr = CMSG_FIRSTHDR(&msg_hdr); if (cmsg_hdr->cmsg_len <= CMSG_LEN(sizeof(scontext)) && cmsg_hdr->cmsg_level == SOL_SOCKET && cmsg_hdr->cmsg_type == SCM_SECURITY) { memcpy(&scontext, CMSG_DATA(cmsg_hdr), sizeof(scontext)); } } sock_setsockopt is enhanced with a new socket option SOCK_PASSSEC to allow a server socket to receive security context of the peer. Testing: We have tested the patch by setting up Unix datagram client and server applications. We verified that the server can retrieve the security context using the auxiliary data mechanism of recvmsg. Signed-off-by: Catherine Zhang <cxzhang@watson.ibm.com> Acked-by: Acked-by: James Morris <jmorris@namei.org> Signed-off-by: David S. Miller <davem@davemloft.net>		19 years ago
..
arch-aaec2000	[ARM] 3631/1: Remove legacy __mem_isa() definitions	19 years ago
arch-at91rm9200	[ARM] 3660/1: Remove legacy defines	19 years ago
arch-cl7500	Don't include linux/config.h from anywhere else in include/	19 years ago
arch-clps711x	[ARM] 3631/1: Remove legacy __mem_isa() definitions	19 years ago
arch-ebsa110	[ARM] ebsa110: Fix incorrect serial port address	19 years ago
arch-ebsa285	[ARM] 3631/1: Remove legacy __mem_isa() definitions	19 years ago
arch-ep93xx	[ARM] 3634/1: ep93xx: initial implementation of the clk_* API	19 years ago
arch-h720x	[ARM] 3660/1: Remove legacy defines	19 years ago
arch-imx	[ARM] 3660/1: Remove legacy defines	19 years ago
arch-integrator	[ARM] 3631/1: Remove legacy __mem_isa() definitions	19 years ago
arch-iop3xx	[ARM] 3631/1: Remove legacy __mem_isa() definitions	19 years ago
arch-ixp4xx	Merge git://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux-2.6	19 years ago
arch-ixp23xx	[ARM] 3662/1: ixp23xx: don't include asm/hardware.h in uncompress.h	19 years ago
arch-ixp2000	[ARM] Fix decompressor serial IO to give CRLF not LFCR	19 years ago
arch-l7200	[ARM] 3631/1: Remove legacy __mem_isa() definitions	19 years ago
arch-lh7a40x	[ARM] 3631/1: Remove legacy __mem_isa() definitions	19 years ago
arch-netx	[ARM] 3631/1: Remove legacy __mem_isa() definitions	19 years ago
arch-omap	[ARM] 3631/1: Remove legacy __mem_isa() definitions	19 years ago
arch-pnx4008	[ARM] 3621/1: fix compilation breakage for pnx4008	19 years ago
arch-pxa	[ARM] 3631/1: Remove legacy __mem_isa() definitions	19 years ago
arch-realview	[ARM] 3631/1: Remove legacy __mem_isa() definitions	19 years ago
arch-rpc	[ARM] Move FLUSH_BASE macros to asm/arch/memory.h	19 years ago
arch-s3c2410	[ARM] 3661/1: S3C2412: Fix compilation if CPU_S3C2410 only	19 years ago
arch-sa1100	[ARM] 3631/1: Remove legacy __mem_isa() definitions	19 years ago
arch-shark	[ARM] Move FLUSH_BASE macros to asm/arch/memory.h	19 years ago
arch-versatile	[ARM] 3631/1: Remove legacy __mem_isa() definitions	19 years ago
hardware	[PATCH] backlight: LOCOMO Backlight Driver updates	19 years ago
mach	Merge master.kernel.org:/pub/scm/linux/kernel/git/gregkh/pci-2.6	19 years ago
a.out.h	Linux-2.6.12-rc2	20 years ago
apm.h	Don't include linux/config.h from anywhere else in include/	19 years ago
assembler.h	[ARM] Remove MODE_(SVC|IRQ|FIQ|USR) and DEFAULT_FIQ	19 years ago
atomic.h	Don't include linux/config.h from anywhere else in include/	19 years ago
auxvec.h	[PATCH] auxiliary vector cleanups	20 years ago
bitops.h	[PATCH] bitops: arm: use generic bitops	19 years ago
bug.h	Merge git://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux-2.6	19 years ago
bugs.h	[ARM] nommu: adjust headers for !MMU ARM systems	19 years ago
byteorder.h	[ARM] Fix byte order macros for Thumb	19 years ago
cache.h	[PATCH] Kill L1_CACHE_SHIFT_MAX	19 years ago
cacheflush.h	Don't include linux/config.h from anywhere else in include/	19 years ago
checksum.h	[ARM] 3292/1: Fix memory corruption in asm-arm/checksum.h: ip_fast_csum()	19 years ago
cpu-multi32.h	[PATCH] qualifiers in return types - easy cases	20 years ago
cpu-single.h	[PATCH] qualifiers in return types - easy cases	20 years ago
cpu.h	Don't include linux/config.h from anywhere else in include/	19 years ago
cputime.h	Linux-2.6.12-rc2	20 years ago
current.h	Linux-2.6.12-rc2	20 years ago
delay.h	[ARM] 3346/1: Fix udelay() for HZ values different from 100	19 years ago
div64.h	Linux-2.6.12-rc2	20 years ago
dma-mapping.h	Don't include linux/config.h from anywhere else in include/	19 years ago
dma.h	Don't include linux/config.h from anywhere else in include/	19 years ago
domain.h	[ARM] nommu: adjust headers for !MMU ARM systems	19 years ago
ecard.h	Linux-2.6.12-rc2	20 years ago
elf.h	Don't include linux/config.h from anywhere else in include/	19 years ago
emergency-restart.h	[PATCH] Add emergency_restart()	20 years ago
errno.h	Linux-2.6.12-rc2	20 years ago
fcntl.h	[PATCH] Clean up struct flock64 definitions	20 years ago
fiq.h	Linux-2.6.12-rc2	20 years ago
floppy.h	[PATCH] random: remove SA_SAMPLE_RANDOM from floppy driver	19 years ago
fpstate.h	[ARM] 3370/2: ep93xx: add crunch support	19 years ago
futex.h	[PATCH] consolidate asm/futex.h	19 years ago
glue.h	Don't include linux/config.h from anywhere else in include/	19 years ago
hardirq.h	Don't include linux/config.h from anywhere else in include/	19 years ago
hardware.h	Linux-2.6.12-rc2	20 years ago
ide.h	[PATCH] ARM: 2758/1: Fix comment in file header to read "ARM" instead i386	20 years ago
io.h	[PATCH] remove ISA legacy functions: remove the helpers	19 years ago
ioctl.h	[PATCH] Generic ioctl.h	19 years ago
ioctls.h	Linux-2.6.12-rc2	20 years ago
ipc.h	Linux-2.6.12-rc2	20 years ago
ipcbuf.h	Linux-2.6.12-rc2	20 years ago
irq.h	[PATCH] adjust handle_IRR_event() return type	19 years ago
kmap_types.h	Linux-2.6.12-rc2	20 years ago
leds.h	Don't include linux/config.h from anywhere else in include/	19 years ago
limits.h	Linux-2.6.12-rc2	20 years ago
linkage.h	Linux-2.6.12-rc2	20 years ago
local.h	Linux-2.6.12-rc2	20 years ago
locks.h	[ARM] 3019/1: fix wrong comments	20 years ago
mc146818rtc.h	Linux-2.6.12-rc2	20 years ago
memory.h	[ARM] nommu: adjust headers for !MMU ARM systems	19 years ago
mman.h	[PATCH] add asm-generic/mman.h	19 years ago
mmu.h	[ARM] nommu: adjust headers for !MMU ARM systems	19 years ago
mmu_context.h	[ARM] nommu: adjust headers for !MMU ARM systems	19 years ago
mmzone.h	Linux-2.6.12-rc2	20 years ago
module.h	Linux-2.6.12-rc2	20 years ago
msgbuf.h	Linux-2.6.12-rc2	20 years ago
mtd-xip.h	[MTD] XIP cleanup	20 years ago
mutex.h	[ARM] 3311/1: clean up include/asm-arm/mutex.h	19 years ago
namei.h	Linux-2.6.12-rc2	20 years ago
nwflash.h	Linux-2.6.12-rc2	20 years ago
page-nommu.h	[ARM] nommu: adjust headers for !MMU ARM systems	19 years ago
page.h	[ARM] nommu: adjust headers for !MMU ARM systems	19 years ago
param.h	[ARM] Move HZ definition into Kconfig	19 years ago
parport.h	Linux-2.6.12-rc2	20 years ago
pci.h	Don't include linux/config.h from anywhere else in include/	19 years ago
percpu.h	Linux-2.6.12-rc2	20 years ago
pgalloc.h	[ARM] nommu: adjust headers for !MMU ARM systems	19 years ago
pgtable-hwdef.h	[ARM] 3439/2: xsc3: add I/O coherency support	19 years ago
pgtable-nommu.h	[ARM] nommu: adjust headers for !MMU ARM systems	19 years ago
pgtable.h	[ARM] nommu: adjust headers for !MMU ARM systems	19 years ago
poll.h	[PATCH] POLLRDHUP/EPOLLRDHUP handling for half-closed devices notifications	19 years ago
posix_types.h	Linux-2.6.12-rc2	20 years ago
proc-fns.h	[ARM] nommu: adjust headers for !MMU ARM systems	19 years ago
processor.h	[ARM] start_thread fixup for nommu mode	19 years ago
procinfo.h	[ARM] 3517/1: move definition of PROC_INFO_SZ from procinfo.h to asm-offsets.h	19 years ago
ptrace.h	[ARM] 3665/1: crunch: add ptrace support	19 years ago
resource.h	Linux-2.6.12-rc2	20 years ago
rtc.h	[PATCH] RTC subsystem: ARM cleanup	19 years ago
scatterlist.h	[ARM] Remove '__address' from scatterlist and convert to DMA API	19 years ago
sections.h	Linux-2.6.12-rc2	20 years ago
segment.h	Linux-2.6.12-rc2	20 years ago
semaphore-helper.h	Linux-2.6.12-rc2	20 years ago
semaphore.h	[ARM] sema_count() removal	19 years ago
sembuf.h	Linux-2.6.12-rc2	20 years ago
serial.h	Linux-2.6.12-rc2	20 years ago
setup.h	[ARM] 2925/3: earlyparam - postfix section with .init for `make buildcheck`	20 years ago
shmbuf.h	Linux-2.6.12-rc2	20 years ago
shmparam.h	Linux-2.6.12-rc2	20 years ago
sigcontext.h	Linux-2.6.12-rc2	20 years ago
siginfo.h	Linux-2.6.12-rc2	20 years ago
signal.h	[ARM] Remove SA_IRQNOMASK	20 years ago
sizes.h	Linux-2.6.12-rc2	20 years ago
smp.h	Don't include linux/config.h from anywhere else in include/	19 years ago
socket.h	[AF_UNIX]: Datagram getpeersec	19 years ago
sockios.h	Linux-2.6.12-rc2	20 years ago
spinlock.h	[ARM] 3533/1: Implement the __raw_(read|write)_can_lock functions on ARM	19 years ago
spinlock_types.h	[PATCH] spinlock consolidation	20 years ago
stat.h	[ARM] 3106/2: ARM EABI: some syscall adjustments	19 years ago
statfs.h	[ARM] 3108/2: old ABI compat: statfs64 and fstatfs64	19 years ago
string.h	[PATCH] ARM: 2653/1: Fix memset and memzero macro double-reference of parameters	20 years ago
suspend.h	Linux-2.6.12-rc2	20 years ago
system.h	Merge branch 'devel' of master.kernel.org:/home/rmk/linux-2.6-arm	19 years ago
termbits.h	Linux-2.6.12-rc2	20 years ago
termios.h	Linux-2.6.12-rc2	20 years ago
therm.h	Linux-2.6.12-rc2	20 years ago
thread_info.h	[ARM] 3370/2: ep93xx: add crunch support	19 years ago
thread_notify.h	[ARM] Add thread_notify infrastructure	19 years ago
timex.h	Linux-2.6.12-rc2	20 years ago
tlb.h	[ARM] noMMU: removes TLB codes in nommu mode	19 years ago
tlbflush.h	Don't include linux/config.h from anywhere else in include/	19 years ago
topology.h	Linux-2.6.12-rc2	20 years ago
traps.h	Linux-2.6.12-rc2	20 years ago
types.h	[PATCH] sab: consolidate kmem_bufctl_t	20 years ago
uaccess.h	[ARM] nommu: uaccess tweaks	19 years ago
ucontext.h	[ARM] 3664/1: crunch: add signal frame save/restore	19 years ago
unaligned.h	Linux-2.6.12-rc2	20 years ago
unistd.h	Merge git://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux-2.6	19 years ago
user.h	Linux-2.6.12-rc2	20 years ago
vfp.h	Linux-2.6.12-rc2	20 years ago
vfpmacros.h	[ARM] 3472/1: Use the D variants of FLDMIA/FSTMIA on ARMv6	19 years ago
vga.h	[PATCH] vgacon: make VGA_MAP_MEM take size, remove extra use	19 years ago
xor.h	Linux-2.6.12-rc2	20 years ago