On Tue, Jun 21, 2016 at 5:55 AM, Huw Davies <huw@xxxxxxxxxxxxxxx> wrote: > On Tue, Jun 21, 2016 at 05:39:28AM -0400, David Miller wrote: >> From: Huw Davies <huw@xxxxxxxxxxxxxxx> >> Date: Mon, 20 Jun 2016 14:36:40 +0100 >> >> > This patch series implements RFC 5570 - Common Architecture Label IPv6 >> > Security Option (CALIPSO). Its goal is to set MLS sensitivity labels >> > on IPv6 packets using a hop-by-hop option. CALIPSO is very similar to >> > its IPv4 cousin CIPSO and much of this series is based on that code. >> >> What tree do you expect to integrate this? > > My understanding is that Paul Moore is happy to take them > in via the SELinux tree. However, these patches do touch > some core networking code, such as the IPv6 option handling > code (in a similar manner to the way CIPSO touched the IPv4 > option code), so if you have any comments on those aspects > that would be good to hear. Huw is correct. I haven't yet gone through this latest patchset, although I've reviewed the previous versions and provided feedback; the v3 revision looked pretty good to me and I'm assuming I won't find any showstoppers in the v4 revision. I'm happy to push this upstream via the SELinux tree, but only with an implicit ACK from DaveM since it does touch of the core stack (in ways comparable to what we did for CIPSO and IPv4). If DaveM would prefer to merge these patches via the netdev tree, that's fine too, I'll take a closer look later this week and send my ACKs. DaveM, let me know how you want to proceed with this patchset. -- paul moore www.paul-moore.com _______________________________________________ Selinux mailing list Selinux@xxxxxxxxxxxxx To unsubscribe, send email to Selinux-leave@xxxxxxxxxxxxx. To get help, send an email containing "help" to Selinux-request@xxxxxxxxxxxxx.
