On Fri, 2006-09-29 at 10:33 -0400, James Morris wrote: > On Fri, 29 Sep 2006, Stephen Smalley wrote: > > > However, since the transition was removed in the flow_out case, it would > > be logical to remove it from the flow_in case as well, and that would > > have the side benefit of less overhead. > > How about adding secmark transitions later, if needed, perhaps with an > /selinux config control ? > > It does keep things simpler for now, in terms of getting this code merged, > deployed into distros and likely certified.
Fine with me, unless Venkat has an immediate use case for such transitions in the flow_in case (but I think this is mostly my fault for suggesting transitions a while ago). -- Stephen Smalley National Security Agency - To unsubscribe from this list: send the line "unsubscribe netdev" in the body of a message to [EMAIL PROTECTED] More majordomo info at http://vger.kernel.org/majordomo-info.html
