Re: [ANNOUNCE][PATCH] New fs to control access to system resources

On Wed, 16 Jan 2002, Andreas Ferber wrote:

> And some wishlist items:
> 
> - It would be nice if there were a way to distinguish between TCP and
>   UDP ports.
> - IPv6 support would be nice. This raises the question what will
>   happen if a process has the privileges to bind a particular port
>   with IPv6 but not with IPv4 (IPv6 listeners take IPv4 connections
>   also). Is there any value in distinguishing IPv6 and IPv4 at all,
>   in particular if IPv6 gets into more widespread use in the future?
> - Restricting access to certain high ports would be valuable. For
>   example many SQL server use those ports, and it would be nice if one
>   could prevent ordinary user processes from taking over their ports
>   in case the SQL daemon gets restarted or the like.
> 
> At least accessfs is a nice and expandable idea. Keep up the work :-)
> 

What would be nice would be to have a way to restrict access to ports
based on IP ex: user1 gets 10.0.0.1 and user2 gets 10.0.0.2.

	Gerhard

--
Gerhard Mack

[e-mail]

<>< As a computer I find your faith in technology amusing.