Messages in this thread | | | Date | Thu, 8 Jan 2009 23:10:27 +1100 | From | Herbert Xu <> | Subject | Re: RFC: Network privilege separation. |
| |
Alan Cox <alan@lxorguk.ukuu.org.uk> wrote: > > That to me says controlling network access is only useful as part of a > more fine grained and general purpose interface. We already have that > interface in the form of things like SELinux. We already have systems > actively using it to control stuff like which ports are accessed by some > services.
Exactly. If people want this they should go the SELinux/LSM route.
Cheers, -- Visit Openswan at http://www.openswan.org/ Email: Herbert Xu ~{PmV>HI~} <herbert@gondor.apana.org.au> Home Page: http://gondor.apana.org.au/~herbert/ PGP Key: http://gondor.apana.org.au/~herbert/pubkey.txt
| |