On Fri, 29 Sep 2006, Stephen Smalley wrote: > However, since the transition was removed in the flow_out case, it would > be logical to remove it from the flow_in case as well, and that would > have the side benefit of less overhead.
How about adding secmark transitions later, if needed, perhaps with an /selinux config control ? It does keep things simpler for now, in terms of getting this code merged, deployed into distros and likely certified. - James -- James Morris <[EMAIL PROTECTED]> - To unsubscribe from this list: send the line "unsubscribe netdev" in the body of a message to [EMAIL PROTECTED] More majordomo info at http://vger.kernel.org/majordomo-info.html
