Re: [RFC] security: add iptables security table for MAC rules

2008-01-29 Thread James Morris
On Tue, 29 Jan 2008, Paul Moore wrote: That seems reasonable. By the way, this isn't really related, but is it possible to change the NF_IP_PRI_SELINUX_* constants to NF_IP_PRI_SECURITY_* for the sake of consistency or are those values already visible to userspace? They are visible to

Re: [RFC] security: add iptables security table for MAC rules

2008-01-29 Thread Paul Moore
On Tuesday 29 January 2008 7:43:11 pm James Morris wrote: On Tue, 29 Jan 2008, Paul Moore wrote: That seems reasonable. By the way, this isn't really related, but is it possible to change the NF_IP_PRI_SELINUX_* constants to NF_IP_PRI_SECURITY_* for the sake of consistency or are those