--- Joy Latten <[EMAIL PROTECTED]> wrote: > I think the ability to toggle whether unlabeled > packets > will be accepted or rejected for labeled networking > is required by lspp. > Klaus, is that correct?
The behavior of a given packet needs to be deterministic and defined. You don't need to be able to change the behavior on the fly, and if you can you'll be required to describe why that's not a potential violation of your access policy. Or at least, that's what happened in the past. Casey Schaufler [EMAIL PROTECTED] -- redhat-lspp mailing list [email protected] https://www.redhat.com/mailman/listinfo/redhat-lspp
