On Thu, 4 Nov 2021 20:59:49 +0100 Ondrej Mosnacek wrote: > As agreed with Xin Long, I'm posting this fix up instead of him. I am > now fairly convinced that this is the right way to deal with the > immediate problem of client peeloff socket labeling. I'll work on > addressing the side problem regarding selinux_socket_post_create() > being called on the peeloff sockets separately. IIUC Paul would like to see this part to come up in the same series. Any predictions when such series would materialize?