[PATCH] [RFC] Smack: unlabeled outgoing ambient packets - v2

2008-02-19 Thread Casey Schaufler
From: Casey Schaufler <[EMAIL PROTECTED]> Smack uses CIPSO labeling, but allows for unlabeled packets by specifying an "ambient" label that is applied to incoming unlabeled packets. Because the other end of the connection may dislike IP options, and ssh is one know application that behaves thus,

Re: [PATCH] [RFC] Smack: unlabeled outgoing ambient packets - v2

2008-02-12 Thread Paul Moore
On Monday 11 February 2008 7:00:33 pm Casey Schaufler wrote: > This patch differs significantly from the previous version. > I think that I am using the netlbl interfaces more appropriately, > Paul, please let me know if there's a better approach. Nope, this approach is what I was talking about.

[PATCH] [RFC] Smack: unlabeled outgoing ambient packets - v2

2008-02-11 Thread Casey Schaufler
From: Casey Schaufler <[EMAIL PROTECTED]> Smack uses CIPSO labeling, but allows for unlabeled packets by specifying an "ambient" label that is applied to incoming unlabeled packets. Because the other end of the connection may dislike IP options, and ssh is one know application that behaves thus,