From: Joy L. <la...@au...> - 2006-10-27 00:00:18
|
Sometime this year code I submitted code that allowed setkey the ability to add SELinux security contexts to ipsec policy and SAs created manually. This code allowed us to leverage IPSec for MAC of Linux Network Communications. This code was accepted into CVS tree for ipsec-tools-0.6.5. When I downloaded ipsec-tools-0.6.6, it wasn't there. Fedora has already pulled the version of ipsec-tools with this functionality into fedora core 6. I am in the process of re-submitting the racoon modifications that are required such that racoon too can negotiate and establish SAs with an SELinux security context. The setkey and racoon modifications have been used and tested by LSPP developers over the last few months. I figured I should ask first about disappearance of setkey modifications before resubmitting the racoon modifications. :-) I'd be happy to resubmit the setkey modifications... would it be best if I resubmit both patches? Regards, Joy Latten |