m_pkthdr.label now moved to m_tag
Ilmar S. Habibulin
ilmar at watson.org
Tue Apr 15 06:30:59 PDT 2003
On Tue, 15 Apr 2003, Robert Watson wrote:
> This change is in the implementation details regarding how internalized
> labels are stamped onto m_tag's -- it doesn't make any changes to where
> those labels come from. As with before, I think the three most useful
> approaches to take are CIPSO, IPsec, and firewall-derived labels, none of
> which are implemented in the base system or MAC tree currently.
I understood, that this only changes labels' location. My question was -
would RIPSO/CIPSO/IPSEC labels implemented and included in the base
freebsd system. Are there any plans about that?
More information about the freebsd-current
mailing list