Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 4 Jul 2006 05:04:48 +1000
From:      Peter Jeremy <peterjeremy@optushome.com.au>
To:        mal content <artifact.one@googlemail.com>
Cc:        freebsd-hackers@freebsd.org
Subject:   Re: Stop further socket() or connect() calls.
Message-ID:  <20060703190448.GD727@turion.vk2pj.dyndns.org>
In-Reply-To: <8e96a0b90607031009v4ec2630fgfc432f5dad15abda@mail.gmail.com>
References:  <8e96a0b90607031009v4ec2630fgfc432f5dad15abda@mail.gmail.com>

next in thread | previous in thread | raw e-mail | index | archive | help

--n2Pv11Ogg/Ox8ay5
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Mon, 2006-Jul-03 18:09:27 +0100, mal content wrote:
>Was it my imagination or did I see a function in libc that
>allowed a process to prevent further network access?

The closest is shutdown(2) which can stop further access in one
direction on an existing socket - not what you want.

>I was looking for a way to write a small wrapper program
>that disables network access and then exec()'s a given
>program.

For dynamic executables, you could LD_PRELOAD a .so that replaces
all the socket-related syscalls.

--=20
Peter Jeremy

--n2Pv11Ogg/Ox8ay5
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.4 (FreeBSD)

iD8DBQFEqWpP/opHv/APuIcRAjHSAJ48JmftHhRx6zIVE6iRPHYNHRrRAwCeNYWJ
RDdOJHrIkWfsgd84+w/ip2c=
=LCqj
-----END PGP SIGNATURE-----

--n2Pv11Ogg/Ox8ay5--



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20060703190448.GD727>