Re: Issue on labeling a packet? (was Re: Issue on getting security context of socket and message)

On Thu, 2004-12-30 at 13:40, Park Lee wrote:
> I've seen them, and know how/where these special
> kernel socket are labeled now.
>
> Let's suppose that when a packet is sending out
> (through XFRM architecture), how can we decide whether
> the packet is associated with a kernel socket or a
> user socket?

kernel sockets have the kernel SID.

-- 
Stephen Smalley <sds@epoch.ncsc.mil>
National Security Agency


--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.