|
From: Jeff D. <jd...@ka...> - 2000-10-07 20:34:57
|
epa...@up... said: > for many apps simply proxying at the socket level from the UML kernel > to the host kernel would be completely sufficent - imagine someone > running a sandboxed app, or (when UML gets ported to say FreeBSD) > running a Linux app that opens a non-priviliged socket up to the > network. There doesn't seem to be any theoretical reason why that > shouldn't be possible. Can a socket be made to look enough like a real network interface to be useful? All network proggies do the bind/listen/accept/connect thing, which sends you into the network layer. At the device layer all you see are packets which need to be sent off somewhere. I don't see how those can be sent to a socket - they need to be sent via a device in the host. So a device driver doesn't seem like it would work. Are there other layers in the network subsystem that have the hooks to plug something else in that would work? It would be nice to drop the suid helper, but I don't see a way to do it. Jeff |