From Sebastien.Roy@Sun.COM Wed Nov 25 14:21:10 2009 Received: from dm-sfbay-02.sfbay.sun.com (dm-sfbay-02.SFBay.Sun.COM [129.146.11.31]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id nAPMLAnF026549 for ; Wed, 25 Nov 2009 14:21:10 -0800 (PST) Received: from brmea-mail-4.sun.com (brmea-mail-4.Sun.COM [192.18.98.36]) by dm-sfbay-02.sfbay.sun.com (8.13.8+Sun/8.13.8/ENSMAIL,v2.4) with ESMTP id nAPML9J5008882 for ; Wed, 25 Nov 2009 14:21:09 -0800 (PST) Received: from fe-amer-10.sun.com ([192.18.109.80]) by brmea-mail-4.sun.com (8.13.6+Sun/8.12.9) with ESMTP id nAPML9EF012490 for ; Wed, 25 Nov 2009 22:21:09 GMT MIME-version: 1.0 Content-transfer-encoding: 7BIT Content-type: text/plain; CHARSET=US-ASCII Received: from conversion-daemon.mail-amer.sun.com by mail-amer.sun.com (Sun Java(tm) System Messaging Server 7u2-7.04 64bit (built Jul 2 2009)) id <0KTO00500QWY4F00@mail-amer.sun.com> for psarc-ext@sac.sfbay.sun.com; Wed, 25 Nov 2009 15:21:09 -0700 (MST) Received: from [192.168.1.5] ([unknown] [173.76.16.34]) by mail-amer.sun.com (Sun Java(tm) System Messaging Server 7u2-7.04 64bit (built Jul 2 2009)) with ESMTPSA id <0KTO00D5HRF8EME0@mail-amer.sun.com>; Wed, 25 Nov 2009 15:21:09 -0700 (MST) Date: Wed, 25 Nov 2009 17:21:08 -0500 From: Sebastien Roy Subject: materials available for inception review of PSARC 2009/590 Socket Filter Framework Sender: Sebastien.Roy@Sun.COM To: PSARC-ext Cc: "Anders.Persson" Message-id: <1259187668.2336.341.camel@seb> Organization: Sun Microsystems Status: RO Content-Length: 308 Materials are available for next week's inception review of 2009/590 Socket Filter Framework. Relative to the case directory: inception.materials/20q.txt inception.materials/sockfilter-design.pdf It may take a few hours for the materials to appear on the external case log at arc.opensolaris.org. -Seb From Darren.Moffat@Sun.COM Thu Nov 26 02:33:12 2009 Received: from dm-sfbay-01.sfbay.sun.com (dm-sfbay-01.SFBay.Sun.COM [129.145.155.118]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id nAQAXCaZ001332 for ; Thu, 26 Nov 2009 02:33:12 -0800 (PST) Received: from gmp-eb-inf-2.sun.com (gmp-eb-inf-2.EU.Sun.COM [192.18.6.24]) by dm-sfbay-01.sfbay.sun.com (8.13.8+Sun/8.13.8/ENSMAIL,v2.4) with ESMTP id nAQAXBDb017028 for ; Thu, 26 Nov 2009 02:33:12 -0800 (PST) Received: from fe-emea-10.sun.com (gmp-eb-lb-1-fe1.eu.sun.com [192.18.6.7] (may be forged)) by gmp-eb-inf-2.sun.com (8.13.7+Sun/8.12.9) with ESMTP id nAQAX6vL016528 for ; Thu, 26 Nov 2009 10:33:06 GMT MIME-version: 1.0 Content-transfer-encoding: 7BIT Content-type: text/plain; CHARSET=US-ASCII; format=flowed Received: from conversion-daemon.fe-emea-10.sun.com by fe-emea-10.sun.com (Sun Java(tm) System Messaging Server 7u2-7.04 64bit (built Jul 2 2009)) id <0KTP00H00N74N500@fe-emea-10.sun.com> for psarc-ext@sac.sfbay.sun.com; Thu, 26 Nov 2009 10:32:55 +0000 (GMT) Received: from [192.168.1.105] (cpc2-rdng20-2-0-cust917.15-3.cable.virginmedia.com [86.28.167.150]) by fe-emea-10.sun.com (Sun Java(tm) System Messaging Server 7u2-7.04 64bit (built Jul 2 2009)) with ESMTPSA id <0KTP0065VPAUBT00@fe-emea-10.sun.com>; Thu, 26 Nov 2009 10:32:54 +0000 (GMT) Date: Thu, 26 Nov 2009 10:32:53 +0000 From: Darren J Moffat Subject: Re: materials available for inception review of PSARC 2009/590 Socket Filter Framework In-reply-to: <1259187668.2336.341.camel@seb> Sender: Darren.Moffat@Sun.COM To: Sebastien Roy Cc: PSARC-ext , "Anders.Persson" Message-id: <4B0E5955.4090609@Sun.COM> References: <1259187668.2336.341.camel@seb> User-Agent: Thunderbird 2.0.0.23 (X11/20091027) Status: RO Content-Length: 1679 Sebastien Roy wrote: > Materials are available for next week's inception review of 2009/590 > Socket Filter Framework. Relative to the case directory: > > inception.materials/20q.txt > inception.materials/sockfilter-design.pdf > > It may take a few hours for the materials to appear on the external case > log at arc.opensolaris.org. I've put the following in the issues file, but I'm repeating them here so the project team has plenty of time to see them and respond. DJM-1 What filters will be provided with the initial integration DJM-2 Will it be possible to build a filter that can easily control all off host networking on a per user basis ? eg any user in a given group or with a given uid can't access the network but can do local socket stuff ? In other words can this case provide a solution to 6215035 ? DJM-3 Even we have exlusive stack networking the fact that filters can only be managed from the global zone seems very surprising to me as someone who doesn't understand the internals of this part of networking. As such I think this will be very surprising to admins, who I expect will want to be able to provide different filtering per zone. Would it be possible for soconfig(1M) to allow specifying which zones the filters apply to ? DJM-4 Is it possible to give a non global zone sufficient privilege so that it can mange filters ? DJM-5 What privileges are required to setup a filter programatically ? DJM-6 What RBAC rights profile will soconfig(1M) be in and what privileges will it run with ? -- Darren J Moffat From sacadmin Thu Feb 25 14:57:40 2010 Received: from sunmail3mpk.sfbay.sun.com (sunmail3mpk.SFBay.Sun.COM [129.146.11.52]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id o1PMvetO012789 for ; Thu, 25 Feb 2010 14:57:40 -0800 (PST) Received: from brm-avmta-1.central.sun.com (brm-avmta-1.Central.Sun.COM [129.147.4.11]) by sunmail3mpk.sfbay.sun.com (8.13.8+Sun/8.13.8/ENSMAIL,v2.4) with ESMTP id o1PMvcfe012688 for <@sunmail2sca.sfbay.sun.com:psarc@sun.com>; Thu, 25 Feb 2010 14:57:40 -0800 (PST) Received: from pmxchannel-daemon.brm-avmta-1.central.sun.com by brm-avmta-1.central.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0KYF00C136G37Y00@brm-avmta-1.central.sun.com> for psarc@sun.com (ORCPT psarc@sun.com); Thu, 25 Feb 2010 15:57:39 -0700 (MST) Received: from sca-es-mail-1.sun.com ([192.18.43.132]) by brm-avmta-1.central.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0KYF00JPC6G395B0@brm-avmta-1.central.sun.com> for psarc@sun.com (ORCPT psarc@sun.com); Thu, 25 Feb 2010 15:57:39 -0700 (MST) Received: from fe-sfbay-10.sun.com ([192.18.43.129]) by sca-es-mail-1.sun.com (8.13.7+Sun/8.12.9) with ESMTP id o1PMvdju021597 for ; Thu, 25 Feb 2010 14:57:39 -0800 (PST) Received: from conversion-daemon.fe-sfbay-10.sun.com by fe-sfbay-10.sun.com (Sun Java(tm) System Messaging Server 7u2-7.04 64bit (built Jul 2 2009)) id <0KYF00J006EBVL00@fe-sfbay-10.sun.com> for psarc@sun.com (ORCPT psarc@sun.com); Thu, 25 Feb 2010 14:57:38 -0800 (PST) Received: from [129.145.154.81] ([unknown] [129.145.154.81]) by fe-sfbay-10.sun.com (Sun Java(tm) System Messaging Server 7u2-7.04 64bit (built Jul 2 2009)) with ESMTPSA id <0KYF000346G28HB0@fe-sfbay-10.sun.com> for psarc@sun.com (ORCPT psarc@sun.com); Thu, 25 Feb 2010 14:57:38 -0800 (PST) Date: Thu, 25 Feb 2010 14:57:38 -0800 From: Asa Romberger Subject: Socket Filter Framework (PSARC/2009/590) Sender: Asa.Romberger@sun.com To: psarc@sun.com Message-id: <4B870062.7080808@sun.com> MIME-version: 1.0 Content-type: text/plain; CHARSET=US-ASCII; format=flowed Content-transfer-encoding: 7BIT X-PMX-Version: 5.4.1.325704 User-Agent: Thunderbird 2.0.0.23 (X11/20090910) Status: RO Content-Length: 14 Minor binding