QNX Operating System/Discussion/OSTech/Mount lsm module(packet filtering) to io-pkt on QNX 7.1/List of Posts
 
Forum Topic - Mount lsm module(packet filtering) to io-pkt on QNX 7.1: (2 Items)
   
Update
Vic One
06/05/2025 6:41 AM
post122660
Mount lsm module(packet filtering) to io-pkt on QNX 7.1   
Hi, is there anyone try to mount your lsm module (packet filtering module)  to the io-pkt stack?

I implement a lsm-pf module and I can mount it by using the following command to enable it on QNX 7.0.
$ mount -T io-pkt /path/to/lsm-pf-my.so
I also try to send some packets to validate.  It works on QNX 7.0.

But, on QNX 7.1, the same command doesn't work.  I get an error message from console as:
mount: Can't mount / (type io-pkt)
mount: Possible reason: Operation not permitted

Then, I try to mount the system's default lsm module : lsm-pf-v6.so by using the same command
$ mount -T io-pkt /path/to/lsm-pf-v6.so
I find it can mount successfully.
I don't know what is the difference between two versions of QNX?
Any suggestion is appreciated.  Thanks.
Vic One
06/09/2025 4:40 AM
post122661
Re: Mount lsm module(packet filtering) to io-pkt on QNX 7.1   
Here is an update from my tracing process.

By checking the memory stack of io-pkt-v6-hc, I find on QNX 7.0,
the io-pkt-v6-hc is normal.  It just loads some needed .so files.
but on QNX 7.1, the additional library libsecpol.so.1 is also loaded by io-pkt-v6-hc.
It seems like even I didn't enalbe the security policy on QNX 7.1, the io-pkt-v6-hc always loads the libsecpol.so?
So the failure message "Operation not permitted" when loading my lsm module might be caused by the new io-pkt-v6-hc arch
?
It might be forced to apply the security policy?

Anyone has comment for this?  Thanks.

Return