Subject: Re: [PATCH net] net: netlink: filter particular protocols from analyzers

From: Daniel Borkmann <[email-masked]>
Date: Thu, 05 Sep 2013 21:59:28 +0200

On 09/05/2013 09:54 PM, David Miller wrote:
> From: Daniel Borkmann <[email-masked]>
> Date: Thu, 05 Sep 2013 21:48:00 +0200
>
>> With socket(PF_PACKET, ..., htons(ETH_P_ALL)) you will already get
>> all users from the suggested white-list of the patch, which is the
>> majority of netlink users I believe. Hence, you do not need to have
>> one socket per protocol. skbs from there should get dragged into
>> pf_packet via dev_queue_xmit_nit() which works on ptype_all list.
>
> What about user level netlink protocols?

If you are referring to NETLINK_USERSOCK, then we let this pass here,
so nothing changes.