m_pkthdr.label now moved to m_tag

Ilmar S. Habibulin ilmar at watson.org
Tue Apr 15 06:30:59 PDT 2003



On Tue, 15 Apr 2003, Robert Watson wrote:

> This change is in the implementation details regarding how internalized
> labels are stamped onto m_tag's -- it doesn't make any changes to where
> those labels come from.  As with before, I think the three most useful
> approaches to take are CIPSO, IPsec, and firewall-derived labels, none of
> which are implemented in the base system or MAC tree currently.

I understood, that this only changes labels' location. My question was -
would RIPSO/CIPSO/IPSEC labels implemented and included in the base
freebsd system. Are there any plans about that?



More information about the freebsd-current mailing list