From mboxrd@z Thu Jan  1 00:00:00 1970
From: Paul Moore <paul.moore@hp.com>
To: "Joshua Brindle" <jbrindle@tresys.com>
Subject: Re: Q: SECMARK controls on forwarded packets
Date: Thu, 10 Jan 2008 15:07:44 -0500
Cc: "Chad Hanson" <chanson@TrustedCS.com>, "James Morris" <jmorris@namei.org>,
        selinux@tycho.nsa.gov, sds@tycho.nsa.gov,
        "Christopher J. PeBenito" <cpebenito@tresys.com>,
        "Venkat Yekkirala" <vyekkirala@TrustedCS.com>
References: <200801082330.58907.paul.moore@hp.com> <200801101410.10082.paul.moore@hp.com> <6FE441CD9F0C0C479F2D88F959B015880153F625@exchange.columbia.tresys.com>
In-Reply-To: <6FE441CD9F0C0C479F2D88F959B015880153F625@exchange.columbia.tresys.com>
MIME-Version: 1.0
Content-Type: text/plain;
  charset="iso-8859-1"
Message-Id: <200801101507.45064.paul.moore@hp.com>
Sender: owner-selinux@tycho.nsa.gov
List-Id: selinux@tycho.nsa.gov

On Thursday 10 January 2008 3:04:59 pm Joshua Brindle wrote:
> Paul Moore wrote:
> > Make more sense now?
>
> Sure, as long as the secmark label isn't mutating to accomidate
> forwarding checks it sounds reasonable to me.

Great, thanks.

-- 
paul moore
linux security @ hp

--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.