Re: [kvm-devel] [RFC][PATCH 00/01]qemu VM entrypoints

On Sat, 21 Jul 2007, Daniel P. Berrange wrote:

> obviously the UNIX user has a corresponding SELinux domain. In the remote
> case, one could map x509 certificate IDs (the remote user's identify) to
> appropriate local SELinux domains.

There is already a mechanism for conveying SELinux labels over the network via IPsec.

• James -- James Morris <jmorris@namei.org>

--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.