Netlink Socket Problem

Chris Wright chrisw at osdl.org
Tue Mar 1 17:38:42 UTC 2005


* Steve Grubb (sgrubb at redhat.com) wrote:
> On Monday 28 February 2005 21:43, Chris Wright wrote:
> > It's not all that clear that you want to bind (esp. with pid = 0)
> > anyway.
> 
> Because netlink is an IPC mechanism, you must bind with nl_pid 0 to make sure 
> you are talking to the kernel. The kernel code should only interpret packets 
> that have nl_pid set to 0. Any other packets should be discarded perhaps with 
> an error to make sure there's no impostors.

I agree for sending or connecting (destination pid), but for binding,
it's effectively a no-op, same as implicit bind that happens with plain
old sendmsg.

> > Steve, can you see if this fixes it up for you?
> 
> David is building a new kernel for everyone, I'll re-test when its available.

Nice, thanks.
-chris
-- 
Linux Security Modules     http://lsm.immunix.org     http://lsm.bkbits.net




More information about the Linux-audit mailing list