microsoft / net-offloads

Specs for new networking hardware offloads.
MIT License
27 stars 3 forks source link

Cross Process Access Control #58

Open nibanks opened 1 year ago

nibanks commented 1 year ago

We need to make sure that one process cannot leverage another's offloaded key material.

nibanks commented 1 year ago

Instead of cross-process, should this be cross-socket? Probably...

anrossi commented 1 year ago

What about when a process creates a socket and then hands it off to a subprocess, with the intent that the subprocess essentially takes over? I suppose cross-socket is kind of assumed, but it's good to call it out and allow the above scenario.