linux-ipsec: applying different transforms per user

I've been looking at the FreeS/WAN IPSEC, and would greatly appreciate your advice on how to proceed with the following:

we'd like to add some enhancements to freeswan IPSEC to allow the use of different security associations on a per-user or per-process basis. The problem I've run up against is how to identify a given packet's user/process at the point that the packet is processed
(wrapped) in ipsec_tunnel_do_xmit() -- and so to apply the correct
security associations to the packet. Incoming packets shouldn't be a problem as they'll be identified by SPI.

This is my first adventure into the network interface in linux at such a low level and I could use some advice as to how to proceed. in short, where can I find the user or parent process ID ?

Ideally, what I'd like to do:

write a negotiation front end that accepts an application to spawn
(and all args) once the security associations have been negotiated.
the executable could be a specific application, or, a shell . . .

• the front-end performs the negotiations, saves the details of the negotiation, and then exec's the application. all network traffic from that application gets wrapped per the negotiated security association.

I've just subscribed to the mailing list, and have seen some mention of ENskip, -- is this a better direction to look in? I'm wading through the file containing all the postings to the list -- my apologies if this has already been dealt with.

Many thanks in advance,

Mark Pilon Received on Fri May 8 23:12:54 1998

Do you need help?

In addition to our free technical library, Pantek provides professional IT services to companies who utilize Open Source software: Learn more about Pantek's Technical Support offerings Place an order for 24/7/365 Technical Support here Learn more about Pantek, who we are, and what we do Chat with a Live Operator Related lists.freeswan.org Links 1998-fall 1998-spring 1998-summer 1998-winter 1999-winter announce briefs bugs design freeswan-list hipsec ietf-sectest users users-admin Request more information about Pantek