Re: Any work in implementing Secure IPC for Linux?

[Chris Friesen]

Kristian Sørensen wrote:

>  By "secure IPC" is meaning a 
> security mechanism that provides a more fine granularity of specifying who 
> are allowed to send (or receive) messages... and maby also a way to resolve 
> the question of "Can I trust the message I received?"

How about unix sockets?
	--you can have sockets in the filesystem namespace with regular file 
permissions to control who is allowed to send messages to particular 
addresses
	--you can authenticate who is sending the message using SCM_CREDENTIALS
	--nobody else can eavesdrop on the messages

Chris
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/