[redhat-lspp] Re: [RFC] [MLSXFRM 00/04] Granular IPSec associations for use in MLS environments

[Trent Jaeger]

On Jun 14, 2006, at 11:35 AM, James Morris wrote:

>
>> - Timewait acknowledgements and such are generated in the current/ 
>> upstream implementation using
>>   a NULL socket resulting in the any_socket sid (SYSTEM_HIGH) to  
>> be used. This problem is not
>>   addressed by this patch set.
>
> This seems fairly problematic.
>
> Also, as Trent is the original author of this work, his input on these
> changes is critical.

I'll take a look over the next 24 hours.

Regards,
Trent.
----------------------------------------------
Trent Jaeger, Associate Professor
Pennsylvania State University, CSE Dept
346A IST Bldg, University Park, PA 16802
Email: tjaeger at cse.psu.edu
Ph: (814) 865-1042, Fax: (814) 865-3176