オープンソース・ソフトウェアの開発とダウンロード

TOMOYO

Subversion リポジトリの参照

/[tomoyo]/trunk/1.8.x/ccs-patch/README.ccs

Diff of /trunk/1.8.x/ccs-patch/README.ccs

Parent Directory Parent Directory | Revision Log Revision Log | View Patch Patch

revision 4049 by kumaneko, Thu Oct 7 07:14:01 2010 UTC revision 4068 by kumaneko, Mon Oct 18 07:57:52 2010 UTC
# Line 2480  Fix 2010/10/05 Line 2480  Fix 2010/10/05
2480        when you have to disable access control for recv() operation due to        when you have to disable access control for recv() operation due to
2481        application breakage by discarding incoming datagram.        application breakage by discarding incoming datagram.
2482    
     @ Wait for next connection/datagram if current connection/datagram was  
       discarded.  
   
       Regarding "network inet stream accept", "network inet dgram recv",  
       "network inet raw recv" directives, I modified to wait for next  
       connection/datagram if current connection/datagram was discarded.  
       LSM hooks for these directives are currently missing because this  
       behavior may break applications. If you found applications broken by  
       this behavior, you can set CONFIG::network::inet_stream_accept and/or  
       CONFIG::network::inet_dgram_recv and/or CONFIG::network::inet_raw_recv  
       to mode=disabled in order to only disable filtering for incoming  
       connection/datagram.  
   
2483      @ Add Unix domain socket restriction support.      @ Add Unix domain socket restriction support.
2484    
2485        Until now, it was possible to restrict only inet domain sockets (i.e.        Until now, it was possible to restrict only inet domain sockets (i.e.
Legend:
Removed from v.4049  
changed lines
  Added in v.4068
Back to OSDN">Back to OSDN
 ViewVC Help
Powered by ViewVC 1.1.26  
サイト情報
ソフトウェアを探す
ソフトウェアを作る
コミュニティ
ヘルプ