From tgraf at infradead.org  Thu Dec  2 05:27:33 2010
From: tgraf at infradead.org (Thomas Graf)
Date: Thu, 2 Dec 2010 05:27:33 -0500
Subject: Compiling problem with libnl
In-Reply-To: <4CF57510.7010508@hiramoto.org>
References: <693903.239251291056137755.JavaMail.www@wwinf4618>
	<20101130171428.GA1065@canuck.infradead.org>
	<4CF57510.7010508@hiramoto.org>
Message-ID: <20101202102733.GC10221@canuck.infradead.org>

On Tue, Nov 30, 2010 at 11:05:04PM +0100, Karl Hiramoto wrote:
> bison -y -d  -o route/cls/ematch_syntax.c route/cls/ematch_syntax.y
> route/cls/ematch_syntax.y:31.9-16: syntax error, unexpected identifier,
> expecting string

> $ bison --version
> bison (GNU Bison) 2.3
> Written by Robert Corbett and Richard Stallman.

Works fine with bison 2.4.1. We need the reentrancy so we have to make
this work.

It seems %pure-parser is the old way of declaring a reentrant parser.


From michele at acksyn.org  Thu Dec  2 11:46:14 2010
From: michele at acksyn.org (Michele Baldessari)
Date: Thu, 2 Dec 2010 17:46:14 +0100
Subject: proxy list
Message-ID: <20101202164614.GA12871@palahniuk.acksyn.org>

Hi Thomas et al.,

I am trying to get the list of arp proxies that I add through the
following iprroute2 command:
ip -6 neigh add proxy 2a01:4f8:130:f00:f00:6:0:4 dev eth0

I've looked at the latest git tree and poked around the different
*neigh* files but I am not on the right track. Also nl-neigh-list is 
not listing these proxies.

Do you have any hints on what is the correct API to fetch this proxy
list or if it still has to be implemented?

thanks and regards,
Michele
-- 
Michele Baldessari <michele at acksyn.org> 
C2A5 9DA3 9961 4FFB E01B  D0BC DDD4 DCCB 7515 5C6D


From tgraf at infradead.org  Fri Dec  3 03:46:09 2010
From: tgraf at infradead.org (Thomas Graf)
Date: Fri, 3 Dec 2010 03:46:09 -0500
Subject: proxy list
In-Reply-To: <20101202164614.GA12871@palahniuk.acksyn.org>
References: <20101202164614.GA12871@palahniuk.acksyn.org>
Message-ID: <20101203084609.GA18994@canuck.infradead.org>

On Thu, Dec 02, 2010 at 05:46:14PM +0100, Michele Baldessari wrote:
> I am trying to get the list of arp proxies that I add through the
> following iprroute2 command:
> ip -6 neigh add proxy 2a01:4f8:130:f00:f00:6:0:4 dev eth0
> 
> I've looked at the latest git tree and poked around the different
> *neigh* files but I am not on the right track. Also nl-neigh-list is 
> not listing these proxies.
> 
> Do you have any hints on what is the correct API to fetch this proxy
> list or if it still has to be implemented?

The kernel does not export arp proxy entries at this point so there
is no way of getting a list of arp proxy entries. I guess the right
thing to do would be to extend the kernel to dump the proxy hash table
if the NTF_PROXY flag is set in a RTM_GETNEIGH request.


From michele at acksyn.org  Fri Dec  3 16:33:20 2010
From: michele at acksyn.org (Michele Baldessari)
Date: Fri, 3 Dec 2010 22:33:20 +0100
Subject: proxy list
In-Reply-To: <20101203084609.GA18994@canuck.infradead.org>
References: <20101202164614.GA12871@palahniuk.acksyn.org>
	<20101203084609.GA18994@canuck.infradead.org>
Message-ID: <20101203213320.GA6682@palahniuk.acksyn.org>

On Fri, Dec 03, 2010 at 03:46:09AM -0500, Thomas Graf wrote:
> On Thu, Dec 02, 2010 at 05:46:14PM +0100, Michele Baldessari wrote:
> The kernel does not export arp proxy entries at this point so there
> is no way of getting a list of arp proxy entries. I guess the right
> thing to do would be to extend the kernel to dump the proxy hash table
> if the NTF_PROXY flag is set in a RTM_GETNEIGH request.

Thanks Thomas, that clears it up. Do you happen to know if this has
already been discussed/planned on net-dev (a quick search in the
archives didn't turn up anything relevant)

regards,
-- 
Michele Baldessari <michele at acksyn.org> 
C2A5 9DA3 9961 4FFB E01B  D0BC DDD4 DCCB 7515 5C6D


From tgraf at infradead.org  Mon Dec  6 02:48:06 2010
From: tgraf at infradead.org (Thomas Graf)
Date: Mon, 6 Dec 2010 02:48:06 -0500
Subject: proxy list
In-Reply-To: <20101203213320.GA6682@palahniuk.acksyn.org>
References: <20101202164614.GA12871@palahniuk.acksyn.org>
	<20101203084609.GA18994@canuck.infradead.org>
	<20101203213320.GA6682@palahniuk.acksyn.org>
Message-ID: <20101206074806.GC18994@canuck.infradead.org>

On Fri, Dec 03, 2010 at 10:33:20PM +0100, Michele Baldessari wrote:
> Thanks Thomas, that clears it up. Do you happen to know if this has
> already been discussed/planned on net-dev (a quick search in the
> archives didn't turn up anything relevant)

I don't remember seeing such a discussion. The code itself is pretty
old and was merged when iproute2 was intially written.

A patch implementing this would not raise any objections I guess.


From yves at langisch.ch  Sun Dec 26 07:09:23 2010
From: yves at langisch.ch (Yves Langisch)
Date: Sun, 26 Dec 2010 13:09:23 +0100
Subject: Secure generic netlink messages
Message-ID: <4D173073.60804@langisch.ch>

All,

I have a userspace process that makes use of generic netlink to
communicate with my kernel module (bi-directional, unicast). As there
are also sensitive data being exchanged I'd like to know what are the
possibilites an attacker have to intercept the netlink messages?

I saw the function 'nl_socket_set_passcred' to pass uid/gid/pid to the
kernel. I think that would help to secure the messages passed to the
kernel as I could check for the uid/gid pair which is unique for the
userspace process in my case. But I have not found any possibility in my
kernel module to get access to this data when a generic netlink
operation is being callbacked. How can I access these credentials in my
operation?

Thanks
Yves

-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 5198 bytes
Desc: S/MIME Cryptographic Signature
URL: <http://lists.infradead.org/pipermail/libnl/attachments/20101226/409ad7ad/attachment.p7s>

From gery.kahn at gmail.com  Thu Dec 30 10:11:56 2010
From: gery.kahn at gmail.com (Gery Kahn)
Date: Thu, 30 Dec 2010 17:11:56 +0200
Subject: [PATCH] fix redefinition of netlink structures
Message-ID: <1293721916-16383-1-git-send-email-geryk@ti.com>

The patch fixes compilation error of others (wpa_supplicant) with libnl.

Signed-off-by: Gery Kahn <geryk at ti.com>
---
 include/netlink/handlers.h |    1 -
 1 files changed, 0 insertions(+), 1 deletions(-)

diff --git a/include/netlink/handlers.h b/include/netlink/handlers.h
index f373f58..e47bcf1 100644
--- a/include/netlink/handlers.h
+++ b/include/netlink/handlers.h
@@ -16,7 +16,6 @@
 #include <stdint.h>
 #include <sys/types.h>
 #include <netlink/netlink-compat.h>
-#include <netlink/netlink-kernel.h>
 
 #ifdef __cplusplus
 extern "C" {
-- 
1.7.0.4



From geryk at ti.com  Thu Dec 30 10:54:59 2010
From: geryk at ti.com (Kahn, Gery)
Date: Thu, 30 Dec 2010 17:54:59 +0200
Subject: [PATCH] fix redefinition of netlink structures
In-Reply-To: <1293721916-16383-1-git-send-email-geryk@ti.com>
References: <1293721916-16383-1-git-send-email-geryk@ti.com>
Message-ID: <AANLkTimMQ-0EWaHx+C5hUADi5394Fuo13WqSQsDokAq_@mail.gmail.com>

Hi Thomas,

Please, discard this patch. It fixes the problem, but broke libnl compilation.

Gery


On Thu, Dec 30, 2010 at 17:11, Gery Kahn <gery.kahn at gmail.com> wrote:
> The patch fixes compilation error of others (wpa_supplicant) with libnl.
>
> Signed-off-by: Gery Kahn <geryk at ti.com>
> ---
> ?include/netlink/handlers.h | ? ?1 -
> ?1 files changed, 0 insertions(+), 1 deletions(-)
>
> diff --git a/include/netlink/handlers.h b/include/netlink/handlers.h
> index f373f58..e47bcf1 100644
> --- a/include/netlink/handlers.h
> +++ b/include/netlink/handlers.h
> @@ -16,7 +16,6 @@
> ?#include <stdint.h>
> ?#include <sys/types.h>
> ?#include <netlink/netlink-compat.h>
> -#include <netlink/netlink-kernel.h>
>
> ?#ifdef __cplusplus
> ?extern "C" {
> --
> 1.7.0.4
>
>
> _______________________________________________
> libnl mailing list
> libnl at lists.infradead.org
> http://lists.infradead.org/mailman/listinfo/libnl
>


