On Fri, Mar 20, 2020 at 8:12 AM Lorenz Bauer <lmb@xxxxxxxxxxxxxx> wrote: > Another way around this might be to add a way to go from socket cookie to > socket, and not touch sockmap. I suspect that is an even steeper hill to climb, > especially if it means adding a new syscall. I think receiving socket FD from socket cookie would be much better approach. It's clean layering and security folks will enforce that bit of api individually. New syscall is not hard to add. man pages, docs are needed regardless.
