[PATCH 7/7] doc: clarify memif secret is not access control

Stephen Hemminger stephen at networkplumber.org
Mon Sep 28 19:56:53 CEST 2026


On Tue, 22 Sep 2026 12:40:58 -0700
Stephen Hemminger <stephen at networkplumber.org> wrote:

> The secret option was described as a security option, which invites
> using it as one. It is sent in cleartext in the connection request,
> and when passed as a device argument it is visible to other local
> users in the process arguments.
> 
> Describe it as what it is, a check against connecting mismatched
> interfaces, and document what actually restricts access to an
> interface. By default the control socket is in the abstract
> namespace and has no filesystem entry to own or permission. Only
> with socket-abstract=no do file permissions and the owner-uid and
> owner-gid options apply.
> 
> Signed-off-by: Stephen Hemminger <stephen at networkplumber.org>
> Tested-by: Sriram Yagnaraman <sriram.yagnaraman at ericsson.com>
> ---

Recheck-request: aws-unit-testing


More information about the dev mailing list