Just a quick follow-up on testing, I've run this for a few hours on two Fedora systems with both labeled and unlabeled IPsec in use with SAs rekeying every 5 minutes and didn't notice anything evil. At this point I'd strip the "RFC" from the patchset and ask that they be considered for inclusion in 2.6.26 assuming there are no objections. -- paul moore linux @ hp -- This message was distributed to subscribers of the selinux mailing list. If you no longer wish to subscribe, send mail to majordomo@xxxxxxxxxxxxx with the words "unsubscribe selinux" without quotes as the message.
