[security-discuss] Should sshd(1M) become label (TX) aware ?

[will young]

Jeffrey Hutzelman wrote:
> On Tue, 30 Oct 2007, will young wrote:
> 
>>      I would like to see it implemented using SO_ALLZONES and be able to
>> pick out the zoneid by the local address.  That would make it applicable
>> to Solaris (and TX without ALL_ZONES interfaces) as well.
> 
> I'm confused.  In the absence of TX, how would you propose an all-zones
> sshd determine which zone to connect the user to?
        Since Solaris can't support an ALL_ZONES interface every local address 
maps to only one zone.  I don't know if we provide a good interface to 
make the deduction but the necessary data exists for an SO_ALLZONES 
process to determine the intended zone.
        -Will
> 
> -- Jeff
>