On Tue, Nov 9, 2021 at 9:21 AM Jakub Kicinski <kuba@xxxxxxxxxx> wrote: > On Thu, 4 Nov 2021 20:59:49 +0100 Ondrej Mosnacek wrote: > > As agreed with Xin Long, I'm posting this fix up instead of him. I am > > now fairly convinced that this is the right way to deal with the > > immediate problem of client peeloff socket labeling. I'll work on > > addressing the side problem regarding selinux_socket_post_create() > > being called on the peeloff sockets separately. > > IIUC Paul would like to see this part to come up in the same series. Just to reaffirm the IIUC part - yes, your understanding is correct. -- paul moore www.paul-moore.com
