Re: [redhat-lspp] Re: [RFC 3/7] NetLabel: CIPSOv4 engine

2006-06-27 Thread Klaus Weidner
On Mon, Jun 26, 2006 at 08:33:57PM -0400, James Morris wrote: > On Mon, 26 Jun 2006, Joe Nall wrote: > > For all of the EAL4 LSPP Linux evaluation work is being done by Red > > Hat/IBM/HP/atsec and others to be useful to integrators, there has to be > > basic > > (e.g. CIPSO) multilevel network in

Re: [redhat-lspp] Re: [RFC 3/7] NetLabel: CIPSOv4 engine

2006-06-26 Thread Paul Moore
On Monday 26 June 2006 8:33 pm, James Morris wrote: > On Mon, 26 Jun 2006, Joe Nall wrote: > > For all of the EAL4 LSPP Linux evaluation work is being done by Red > > Hat/IBM/HP/atsec and others to be useful to integrators, there has to be > > basic (e.g. CIPSO) multilevel network interoperability

Re: [redhat-lspp] Re: [RFC 3/7] NetLabel: CIPSOv4 engine

2006-06-26 Thread James Morris
On Mon, 26 Jun 2006, Joe Nall wrote: > For all of the EAL4 LSPP Linux evaluation work is being done by Red > Hat/IBM/HP/atsec and others to be useful to integrators, there has to be basic > (e.g. CIPSO) multilevel network interoperability with existing multilevel > systems and good (e.g IPSec) mul

Re: [redhat-lspp] Re: [RFC 3/7] NetLabel: CIPSOv4 engine

2006-06-26 Thread Joe Nall
On Jun 22, 2006, at 4:12 AM, David Miller wrote: From: [EMAIL PROTECTED] Date: Wed, 21 Jun 2006 15:42:38 -0400 Add support for the Commercial IP Security Option (CIPSO) to the IPv4 network stack. CIPSO has become a de-facto standard for trusted/labeled networking amongst existing Trusted Ope

Re: [RFC 3/7] NetLabel: CIPSOv4 engine

2006-06-26 Thread James Morris
On Fri, 23 Jun 2006, Paul Moore wrote: > James Morris wrote: > > > > Support for interoperability with legacy CIPSO systems is something that I > > think would be nice to have, if it can be done in a way which doesn't > > impact deeply on core kernel code, and plays nicely with native Linux >

Re: [RFC 3/7] NetLabel: CIPSOv4 engine

2006-06-23 Thread Paul Moore
James Morris wrote: > > Support for interoperability with legacy CIPSO systems is something that I > think would be nice to have, if it can be done in a way which doesn't > impact deeply on core kernel code, and plays nicely with native Linux > infrastructure. > I'm not sure if you have had a

Re: [RFC 3/7] NetLabel: CIPSOv4 engine

2006-06-23 Thread James Morris
On Fri, 23 Jun 2006, Ted wrote: > I can guarantee that initially SELinux adoption will be by those running > trusted OSs and they will want their systems to be able to interoperate > at level. The idea that IPSEC will fill this need in the near term is > just not realistic. SELinux is already bei

Re: [RFC 3/7] NetLabel: CIPSOv4 engine

2006-06-23 Thread Ted
On Fri, 2006-06-23 at 13:15 -0700, David Miller wrote: > From: Ted <[EMAIL PROTECTED]> > Date: Fri, 23 Jun 2006 13:48:01 -0500 > > > Realistically customers most likely to adopt use of SELinux are > > going to be ones that currently use other trusted OSs such as TSOL > > and HP-UX CMW. > > Every

Re: [RFC 3/7] NetLabel: CIPSOv4 engine

2006-06-23 Thread David Miller
From: Ted <[EMAIL PROTECTED]> Date: Fri, 23 Jun 2006 13:48:01 -0500 > Realistically customers most likely to adopt use of SELinux are > going to be ones that currently use other trusted OSs such as TSOL > and HP-UX CMW. Every single user who installs a modern distribution these days likely gets S

Re: [RFC 3/7] NetLabel: CIPSOv4 engine

2006-06-23 Thread Ted
On Thu, 2006-06-22 at 02:12 -0700, David Miller wrote: > From: [EMAIL PROTECTED] > Date: Wed, 21 Jun 2006 15:42:38 -0400 > > > Add support for the Commercial IP Security Option (CIPSO) to the > > IPv4 network stack. CIPSO has become a de-facto standard for > > trusted/labeled networking amongst e

Re: [RFC 3/7] NetLabel: CIPSOv4 engine

2006-06-22 Thread Ryan Pratt
Paul Moore wrote: On Thursday 22 June 2006 5:12 am, David Miller wrote: From: [EMAIL PROTECTED] Date: Wed, 21 Jun 2006 15:42:38 -0400 The thing that concerns me most about CIPSO is that even once users migrate to a more SELINUX native approach from this CIPSO stuff, the CIPSO code, it

Re: [RFC 3/7] NetLabel: CIPSOv4 engine

2006-06-22 Thread Paul Moore
On Thursday 22 June 2006 5:12 am, David Miller wrote: > From: [EMAIL PROTECTED] > Date: Wed, 21 Jun 2006 15:42:38 -0400 > > > Add support for the Commercial IP Security Option (CIPSO) to the > > IPv4 network stack. CIPSO has become a de-facto standard for > > trusted/labeled networking amongst exi

Re: [RFC 3/7] NetLabel: CIPSOv4 engine

2006-06-22 Thread David Miller
From: [EMAIL PROTECTED] Date: Wed, 21 Jun 2006 15:42:38 -0400 > Add support for the Commercial IP Security Option (CIPSO) to the > IPv4 network stack. CIPSO has become a de-facto standard for > trusted/labeled networking amongst existing Trusted Operating > Systems such as Trusted Solaris, HP-UX

[RFC 3/7] NetLabel: CIPSOv4 engine

2006-06-21 Thread paul . moore
Add support for the Commercial IP Security Option (CIPSO) to the IPv4 network stack. CIPSO has become a de-facto standard for trusted/labeled networking amongst existing Trusted Operating Systems such as Trusted Solaris, HP-UX CMW, etc. This implementation is designed to be used with the NetLabel