This is an updated version of the NetLabel patch I sent out on May 25th. It contains a variety of fixes and incorporates comments from James Morris, Stephen Smalley, and Steve Grubb. An intermediate version of this patch set has also been tested against Trusted Solaris and HP-UX CMW for CIPSO interoperability. I have tested this patch set on x86 and x86_64 architectures running both the targeted/enforcing and mls/permissive SELinux policies.
Just like before I am sending this patch out in an effort to solicit feedback from developers, any comments you can afford to send would be greatly appreciated. While the patch is still "unfinished" my current todo list is much shorter, the major tasks still remaining are: * protect against setsockopt() calls * address the remaining "PM" comments For those wishing to try the patch for themselves you will need to download and install the NetLabel tools. The tools are used to configure the NetLabel subsystem, documentation (including a man page) is included in the tarball. The NetLabel tools, as well as more information, can be found here: * http://free.linux.hp.com/~pmoore/projects/linux_cipso Thanks. -- paul moore linux security @ hp - To unsubscribe from this list: send the line "unsubscribe netdev" in the body of a message to [EMAIL PROTECTED] More majordomo info at http://vger.kernel.org/majordomo-info.html
