| |||||||||||||
Kernel Summit: SecurityKernel Summit: SecurityPosted Jul 22, 2004 15:41 UTC (Thu) by stock (guest, #5849)Parent article: Kernel Summit: Security "Labeled networking" is another wishlist item; it would allow packets to be marked on entry to a network and handled according to those labels. Ain't that a feature which is already _INSIDE_ the IP protocol definition?? Robert
(Log in to post comments)
Labeled Networking: Reserved vs. Implemented Posted Jul 22, 2004 18:31 UTC (Thu) by AnswerGuy (guest, #1256) [Link] I think there are fields in the IP header which are reserved for this, but very few TCP/IP stacks support any use of that field.Implementing support for this in Linux would seem to be a simple matter of coding up the appropriate netfilter modules and adding support to iptables, the iproute2 package or other utilities to set kernel policies regarding these labels. I'm curious what the intended application would be. JimD
|
|||||||||||||