1knet_handle_enable_access_Klriosntoss(n3e)t Programmerk'nsetM_ahnaunadlle_enable_access_lists(3)
2
3
4
6 knet_handle_enable_access_lists - Enable or disable usage of access
7 lists (default: off)
8
10 #include <libknet.h>
11
12 int knet_handle_enable_access_lists(
13 knet_handle_t knet_h,
14 unsigned int enabled
15 );
16
18 knet_handle_enable_access_lists
19
20 knet_h - pointer to knet_handle_t
21
22 enable - set to 1 to use access lists, 0 to disable access_lists.
23
24 access lists are bound to links. There are 2 types of links: 1) point
25 to point, where both source and destinations are well known at configu‐
26 ration time. 2) open links, where only the source is known at configu‐
27 ration time.
28
29 knet will automatically generate access lists for point to point links.
30
31 For open links, knet provides 4 API calls to manipulate access lists:
32 knet_link_add_acl(3), knet_link_rm_acl(3), knet_link_insert_acl(3) and
33 knet_link_clear_acl(3). Those API calls will work exclusively on open
34 links as they are of no use on point to point links.
35
36 knet will not enforce any access list unless specifically enabled by
37 knet_handle_enable_access_lists(3).
38
39 From a security / programming perspective we recommend:
40
41 create the knet handle
42
43 enable access lists
44
45 configure hosts and links
46
47 configure access lists for open links
48
50 knet_handle_enable_access_lists returns 0 on success -1 on error and
51 errno is set.
52
54 knet_handle_remove_datafd(3), knet_handle_get_stats(3),
55 knet_host_add(3), knet_handle_pmtud_setfreq(3),
56 knet_handle_pmtud_get(3), knet_host_get_id_by_host_name(3),
57 knet_host_get_status(3), knet_link_add_acl(3),
58 knet_link_get_pong_count(3), knet_link_get_priority(3),
59 knet_handle_free(3), knet_handle_enable_sock_notify(3),
60 knet_handle_get_datafd(3), knet_recv(3), knet_link_get_ping_timers(3),
61 knet_log_get_subsystem_id(3), knet_host_remove(3),
62 knet_host_enable_status_change_notify(3), knet_strtoaddr(3),
63 knet_link_rm_acl(3), knet_send(3), knet_handle_enable_pmtud_notify(3),
64 knet_handle_get_transport_reconnect_interval(3),
65 knet_link_get_enable(3), knet_link_set_priority(3),
66 knet_log_set_loglevel(3), knet_handle_get_channel(3),
67 knet_link_get_config(3), knet_link_get_link_list(3),
68 knet_get_transport_list(3), knet_get_transport_id_by_name(3),
69 knet_log_get_loglevel_id(3), knet_handle_new_ex(3),
70 knet_host_set_name(3), knet_addrtostr(3), knet_handle_setfwd(3),
71 knet_get_compress_list(3), knet_host_set_policy(3),
72 knet_get_transport_name_by_id(3), knet_handle_enable_filter(3),
73 knet_handle_compress(3), knet_link_get_status(3),
74 knet_handle_add_datafd(3), knet_send_sync(3),
75 knet_log_get_loglevel_name(3), knet_host_get_host_list(3),
76 knet_host_get_policy(3), knet_link_set_enable(3),
77 knet_link_set_pong_count(3), knet_log_get_subsystem_name(3),
78 knet_host_get_name_by_host_id(3), knet_link_clear_config(3),
79 knet_log_get_loglevel(3), knet_handle_new(3),
80 knet_handle_pmtud_getfreq(3), knet_handle_pmtud_set(3),
81 knet_handle_clear_stats(3), knet_link_set_config(3),
82 knet_handle_crypto(3), knet_get_crypto_list(3),
83 knet_handle_set_transport_reconnect_interval(3),
84 knet_link_clear_acl(3), knet_link_set_ping_timers(3),
85 knet_link_insert_acl(3)
86
88 Copyright (C) 2010-2019 Red Hat, Inc. All rights reserved.
89
90
91
92kronosnet 2019-10-16knet_handle_enable_access_lists(3)