Re: [RFC][PATCH 00/01]qemu VM entrypoints

James Morris
2007-07-21T01:41:31Z

On Sat, 21 Jul 2007, Daniel P. Berrange wrote:

> obviously the UNIX user has a corresponding SELinux domain. In the remote
> case, one could map x509 certificate IDs (the remote user's identify) to
> appropriate local SELinux domains.

There is already a mechanism for conveying SELinux labels over the network
via IPsec.

- James
--
James Morris
<jmorris-gx6/JNMH7DfYtjvyW6yDsg@public.gmane.org>