Re: [systemd-devel] [PATCH v2] socket: introduce SELinuxContextViaNet option

2014-08-20 Thread Lennart Poettering
On Wed, 20.08.14 19:53, Michal Sekletar (msekl...@redhat.com) wrote: > This makes possible to spawn service instances triggered by socket with > MLS/MCS SELinux labels which are created based on information provided by > connected peer. > > Implementation of label_get_child_label derived from xin

[systemd-devel] [PATCH v2] socket: introduce SELinuxContextViaNet option

2014-08-20 Thread Michal Sekletar
This makes possible to spawn service instances triggered by socket with MLS/MCS SELinux labels which are created based on information provided by connected peer. Implementation of label_get_child_label derived from xinetd. Reviewed-by: Paul Moore --- Changes in v2: * make possible to us