Re: [PATCH] (02/14/08 Linus git) Smack unlabeled outgoing ambient packets - v3

2008-02-15 Thread Casey Schaufler
--- Paul Moore <[EMAIL PROTECTED]> wrote: > > Yerk. I can put that fix into my tree, but my patch without > > the "correction" makes sockets behave very badly. I can't have > > people using it without Pavel's fix. Any notion on the plans to > > get that in? > > FYI, it looks like Linus just tag

Re: [PATCH] (02/14/08 Linus git) Smack unlabeled outgoing ambient packets - v3

2008-02-15 Thread Paul Moore
On Friday 15 February 2008 4:00:26 pm Casey Schaufler wrote: > --- Paul Moore <[EMAIL PROTECTED]> wrote: > > On Friday 15 February 2008 12:38:49 am Casey Schaufler wrote: > > > From: Casey Schaufler <[EMAIL PROTECTED]> > > > > > > Smack uses CIPSO labeling, but allows for unlabeled packets > > > by

Re: [PATCH] (02/14/08 Linus git) Smack unlabeled outgoing ambient packets - v3

2008-02-15 Thread Paul Moore
On Friday 15 February 2008 4:00:26 pm Casey Schaufler wrote: > --- Paul Moore <[EMAIL PROTECTED]> wrote: > > On Friday 15 February 2008 12:38:49 am Casey Schaufler wrote: > > ... you shouldn't fix-up the return value from > > netlbl_sock_setattr(). It only returns an error when there really > > is

Re: [PATCH] (02/14/08 Linus git) Smack unlabeled outgoing ambient packets - v3

2008-02-15 Thread Casey Schaufler
--- Paul Moore <[EMAIL PROTECTED]> wrote: > On Friday 15 February 2008 12:38:49 am Casey Schaufler wrote: > > From: Casey Schaufler <[EMAIL PROTECTED]> > > > > Smack uses CIPSO labeling, but allows for unlabeled packets > > by specifying an "ambient" label that is applied to incoming > > unlabele

Re: [PATCH] (02/14/08 Linus git) Smack unlabeled outgoing ambient packets - v3

2008-02-15 Thread Paul Moore
On Friday 15 February 2008 12:38:49 am Casey Schaufler wrote: > From: Casey Schaufler <[EMAIL PROTECTED]> > > Smack uses CIPSO labeling, but allows for unlabeled packets > by specifying an "ambient" label that is applied to incoming > unlabeled packets. Because the other end of the connection > may

[PATCH] (02/14/08 Linus git) Smack unlabeled outgoing ambient packets - v3

2008-02-15 Thread Casey Schaufler
From: Casey Schaufler <[EMAIL PROTECTED]> Smack uses CIPSO labeling, but allows for unlabeled packets by specifying an "ambient" label that is applied to incoming unlabeled packets. Because the other end of the connection may dislike IP options, and ssh is one know application that behaves thus,