On Sat, 21 Jul 2007, Daniel P. Berrange wrote: > obviously the UNIX user has a corresponding SELinux domain. In the remote > case, one could map x509 certificate IDs (the remote user's identify) to > appropriate local SELinux domains.
There is already a mechanism for conveying SELinux labels over the network via IPsec. - James -- James Morris <[EMAIL PROTECTED]>