FYI- -----Original Message----- From: Venkat Yekkirala Sent: Friday, June 16, 2006 12:13 PM To: Venkat Yekkirala; 'Stephen Smalley' Cc: '[email protected]'; '[EMAIL PROTECTED]'; '[EMAIL PROTECTED]'; '[EMAIL PROTECTED]' Subject: RE: [RFC] [MLSXFRM 00/04] Granular IPSec associations for use in MLS environments
> > is it just a matter of how we configure the policy rules > for polmatch? > > Actually, it would be the ranged SA labels (defined in the > xfrm policy), used > as the target by sendto and recvfrom. and used as the subject in the polmatch check, yes. -- redhat-lspp mailing list [email protected] https://www.redhat.com/mailman/listinfo/redhat-lspp
