James Morris <[EMAIL PROTECTED]> wrote: > > The following patchset is an updated version of secmark, which I'd like to > propose for inclusion in either Dave or Andrew's tree for subsequent merge > into mainline during the 2.6.18 merge window.
Well as discussed off-list, I'm not able to get this stuff to work. I get a pile of these: security_compute_av: unrecognized class 57 security_compute_av: unrecognized class 57 security_compute_av: unrecognized class 57 security_compute_av: unrecognized class 57 security_compute_av: unrecognized class 57 security_compute_av: unrecognized class 57 security_compute_av: unrecognized class 57 security_compute_av: unrecognized class 57 security_compute_av: unrecognized class 57 security_compute_av: unrecognized class 57 security_compute_av: unrecognized class 57 security_compute_av: unrecognized class 57 security_compute_av: unrecognized class 57 security_compute_av: unrecognized class 57 security_compute_av: unrecognized class 57 security_compute_av: unrecognized class 57 security_compute_av: unrecognized class 57 coming out and networking is dead. And I'd agree with the other commenters: if these features are compulsory for SELinux then we might as well just `select' them. Right now it's way too hard. Even if we do that, the chances of people actually going off and finding all the other random secmark Kconfig options and turning on the appropriate ones seem pretty small. Needs a rethink. Perhaps a standalone secmark menu, or just selecting everything.. And maybe just remove all the various netfilter secmark CONFIG options altogether and make all the new code dependent upon the top-level CONFIG_SECMARK. - To unsubscribe from this list: send the line "unsubscribe netdev" in the body of a message to [EMAIL PROTECTED] More majordomo info at http://vger.kernel.org/majordomo-info.html
