On Sat, 2010-09-25 at 10:41 +0200, Pablo Neira Ayuso wrote: > On 24/09/10 22:45, Eric Paris wrote: > > Currently the nfconntrack export code sends the kernel internal secid to > > userspace in a couple of proc files and over netlink as an integer. This > > is wrong. This number is a kernel internal. This patch changes the export > > code to output either 0 or 1 for this value. A future patch will implement > > sending the name rather than the number in a new field. > > I'm not sure why you need this transitional patch if you later on > replace it. > > Better to change the /proc output to make it consistent with patch 5/6? Jan has stated his opinion I should not export the new secctx field via the procfs interface. This patch was included in the series in case that was the consensus of the lists and thus we just wouldn't apply patch 6/6 (which drops secmark and adds secctx to procfs) -Eric -- This message was distributed to subscribers of the selinux mailing list. If you no longer wish to subscribe, send mail to majordomo@xxxxxxxxxxxxx with the words "unsubscribe selinux" without quotes as the message.
