On Mon, Jul 27, 2020 at 5:44 PM Topi Miettinen <toiwoton@xxxxxxxxx> wrote: > MLS is not very interesting for users in general and so neither will be > CIPSO/CALIPSO. Maybe labeled IPSec could be useful in some controlled > corporate environments where all parties are relatively trusted. Don't forget that in most cases when you see "MLS" in the context of SELinux, you should think "MLS" or "MCS". While MLS may have limited interest outside of a few specific types of users, MCS is what underpins SELinux's virtualization and container security for most users. -- paul moore www.paul-moore.com
