From mboxrd@z Thu Jan 1 00:00:00 1970 From: James Morris Subject: Re: [PATCH 7/7] secid reconciliation-v03: Enforcement for SELinux Date: Fri, 29 Sep 2006 12:10:59 -0400 (EDT) Message-ID: References: <451C85F4.7000406@trustedcs.com> <451C9897.6030306@gentoo.org> <1159534759.8496.1.camel@moss-spartans.epoch.ncsc.mil> <1159538414.3592.5.camel@twoface.columbia.tresys.com> <1159540113.8496.59.camel@moss-spartans.epoch.ncsc.mil> <1159540754.8496.62.camel@moss-spartans.epoch.ncsc.mil> <451D4475.3020003@hp.com> Mime-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Cc: Stephen Smalley , Joshua Brindle , Venkat Yekkirala , netdev@vger.kernel.org, selinux@tycho.nsa.gov, kmacmillan@mentalrootkit.com Return-path: Received: from mail2.sea5.speakeasy.net ([69.17.117.4]:18324 "EHLO mail2.sea5.speakeasy.net") by vger.kernel.org with ESMTP id S932318AbWI2QLB (ORCPT ); Fri, 29 Sep 2006 12:11:01 -0400 To: Paul Moore In-Reply-To: <451D4475.3020003@hp.com> Sender: netdev-owner@vger.kernel.org List-Id: netdev.vger.kernel.org On Fri, 29 Sep 2006, Paul Moore wrote: > Unless I'm confusing something, there still may be a need for transitions > if we want to support both IPsec and NetLabel labeling on the same > connection. I'd prefer not to support this, as it's too complicated, and CIPSO is a legacy protocol. Normal IPsec protection applied to CIPSO: yes, but not IPsec labeling and CIPSO labeling on the same connection. - James -- James Morris