[redhat-lspp] mls level to without classification

[George C. Wilson]

On Tue, Aug 22, 2006 at 11:21:26AM -0400, James Morris wrote:
> On Tue, 22 Aug 2006, Joe Nall wrote:
> 
> > I hope secmark will make it into RH5, giving us a mechanism to label  
> > individual hosts that don't support CIPSO or IPSec labeled networking.
> 
> It's the default now.  The old controls are only there for legacy 
> purposes.
> 
> 
> 
> - James
> -- 
> James Morris
> <jmorris at redhat.com>
> 

Is it acceptable to make use of the old controls for the certified
configuration?  Or must we migrate to secmark?  We want to avoid having to
document and test secmark so that we don't increase the scope of the TOE.

-- 
George Wilson <ltcgcw at us.ibm.com>
IBM Linux Technology Center