I've tested this patch with and without the kernel patch described in "Add SCM_SECURITY support to IPv6" [1] over a few kernel releases (4.13.4 was my latest test). Thought I would post and see how it goes as you may want the datagram support removed as the kernel patch has not been submitted yet. [1] https://github.com/SELinuxProject/selinux-kernel/issues/24 Richard Haines (1): selinux-testsuite: Add CALIPSO/IPv6 tests tests/inet_socket/Makefile | 3 + tests/inet_socket/calipso-flush | 5 ++ tests/inet_socket/calipso-load | 7 +++ tests/inet_socket/server.c | 67 +++++++++++++++++------ tests/inet_socket/test | 118 ++++++++++++++++++++++++++++++++++++---- 5 files changed, 173 insertions(+), 27 deletions(-) create mode 100644 tests/inet_socket/calipso-flush create mode 100644 tests/inet_socket/calipso-load -- 2.13.6
