[Date Prev][Date Next] [Thread Prev][Thread Next]
[Thread Index]
[Date Index]
[Author Index]
Re: [redhat-lspp] Re: [RFC 3/7] NetLabel: CIPSOv4 engine
- From: James Morris <jmorris namei org>
- To: Joe Nall <joe nall com>
- Cc: jmorris redhat com, Paul Moore <paul moore hp com>, Stephen Smalley <sds epoch ncsc mil>, RedHat LSPP <redhat-lspp redhat com>, linux-security-module vger kernel org, SELinux List <selinux tycho nsa gov>, netdev vger kernel org, Steve Grubb <sgrubb redhat com>, David Miller <davem davemloft net>
- Subject: Re: [redhat-lspp] Re: [RFC 3/7] NetLabel: CIPSOv4 engine
- Date: Mon, 26 Jun 2006 20:33:57 -0400 (EDT)
On Mon, 26 Jun 2006, Joe Nall wrote:
> For all of the EAL4 LSPP Linux evaluation work is being done by Red
> Hat/IBM/HP/atsec and others to be useful to integrators, there has to be basic
> (e.g. CIPSO) multilevel network interoperability with existing multilevel
> systems and good (e.g IPSec) multilevel networking between SELinux systems.
Just to be clear, my understanding is that the native xfrm labeling is
suitable for LSPP evaluation, as distinct from CIPSO being desired by
system integrators from an interoperability point of view.
- James
--
James Morris
<jmorris namei org>
[Date Prev][Date Next] [Thread Prev][Thread Next]
[Thread Index]
[Date Index]
[Author Index]