After thinking about it this weekend I made some more updates to the ingres/egress patch to properly integrate secmark support (I forgot to include it in the patch posted last Friday) and cleanup some residual mess from the change in approach. Also, for the record, I just posted the skb_clone() fix and the ingress/egress patch to netdev for review. With a little bit of luck there won't be any serious objections. I've also started working on the related policy changes to support the new functionality, I hope to have a simple patch posted later this week that others can use to start playing with the new controls. As usual, any comments or feedback are encouraged. Thanks. -- paul moore linux security @ hp -- This message was distributed to subscribers of the selinux mailing list. If you no longer wish to subscribe, send mail to majordomo@xxxxxxxxxxxxx with the words "unsubscribe selinux" without quotes as the message.
