[redhat-lspp] Re: [RFC] [MLSXFRM 00/04] Granular IPSec associations for use in MLS environments

[Trent Jaeger <tjaeger cse psu edu>]

On Jun 14, 2006, at 11:35 AM, James Morris wrote:

> > - Timewait acknowledgements and such are generated in the current/ 
> > upstream implementation using
> >   a NULL socket resulting in the any_socket sid (SYSTEM_HIGH) to  
> > be used. This problem is not
> >   addressed by this patch set.
>
> This seems fairly problematic.
>
> Also, as Trent is the original author of this work, his input on these
> changes is critical.

I'll take a look over the next 24 hours.

Regards,
Trent.
----------------------------------------------
Trent Jaeger, Associate Professor
Pennsylvania State University, CSE Dept
346A IST Bldg, University Park, PA 16802
Email: tjaeger cse psu edu
Ph: (814) 865-1042, Fax: (814) 865-3176