Date: Tue, 15 Apr 2003 13:35:58 -0400 (EDT) From: Robert Watson <rwatson@FreeBSD.org> To: "Ilmar S. Habibulin" <ilmar@watson.org> Cc: current@FreeBSD.org Subject: Re: m_pkthdr.label now moved to m_tag Message-ID: <Pine.NEB.3.96L.1030415133458.33292F-100000@fledge.watson.org> In-Reply-To: <20030415092837.G92160@fledge.watson.org>
next in thread | previous in thread | raw e-mail | index | archive | help
On Tue, 15 Apr 2003, Ilmar S. Habibulin wrote: > On Tue, 15 Apr 2003, Robert Watson wrote: > > > This change is in the implementation details regarding how internalized > > labels are stamped onto m_tag's -- it doesn't make any changes to where > > those labels come from. As with before, I think the three most useful > > approaches to take are CIPSO, IPsec, and firewall-derived labels, none of > > which are implemented in the base system or MAC tree currently. > > I understood, that this only changes labels' location. My question was - > would RIPSO/CIPSO/IPSEC labels implemented and included in the base > freebsd system. Are there any plans about that? There are no current plans, although your CIPSO and IPsec patches have been floating around and we've been meaning to update and adapt them for ages. Unfortunately, time constraints have thus far prevented that. I have hopes we will get to it within a few months, however. I'd like very much to ship 5.1 with at least IPsec support. Robert N M Watson FreeBSD Core Team, TrustedBSD Projects robert@fledge.watson.org Network Associates Laboratories
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.NEB.3.96L.1030415133458.33292F-100000>