Messages in this thread | | | Date | Thu, 30 Mar 2023 23:39:41 -0700 | From | Jakub Kicinski <> | Subject | Re: [PATCH v3 6/7] netlink: Add multicast group level permissions |
| |
On Wed, 29 Mar 2023 11:25:42 -0700 Anjali Kulkarni wrote: > A new field perm_groups is added in netlink_sock to store the protocol's > multicast group access permissions. This is to allow for a more fine > grained access control than just at the protocol level. These > permissions can be supplied by the protocol via the netlink_kernel_cfg. > A new function netlink_multicast_allowed() is added, which checks if > the protocol's multicast group has non-root access before allowing bind.
Is there a reason this is better than implementing .bind in the connector family and filtering there?
| |