On Wed, 2006-08-23 at 12:44 -0400, Stephen Smalley wrote: > On Wed, 2006-08-23 at 09:15 -0500, George C. Wilson wrote:
> There are no "detailed design docs" for secmark. There is the > description provided by James in his live journal, > http://james-morris.livejournal.com/11010.html, > the patch descriptions included with the patches on netdev, and some > discussion of policy integration on selinux list. The final stage of > integration with the Red Hat iptables configuration isn't yet finalized > AFAIK, although Karl likely knows more. > It's in progress, though it will probably be test3 before it shows up. All the patches are available from http://people.redhat.com/jmorris/selinux/secmark/. Current refpolicy can also give you an idea of to use secmark via the rules that it generates. Karl -- redhat-lspp mailing list [email protected] https://www.redhat.com/mailman/listinfo/redhat-lspp
