ACL-0.5 release

[Ilmar S. Habibulin]

On Mon, 4 Dec 2000, richard offer wrote:

> * How do you provide network labeling support? Do you use RIPSO or
> * CIPSO? How about interoperability with other trusted systems?
> CIPSO and SAMP would be nice :-)
Where can i find protocol descriptions? I managed to find only CIPSO
option number 134 (i suppose). 

> In theory, the SAMP code could be shared between BSD and Linux, its a
> deamon, and if I looked there's probably Trusted Irix code on oss.sgi.com.
Does SAMP code included in ob1?

> I (we) don't have a design for the linux version yet, but initial thoughts
> are to hook it into the kernel via netfilter...
As i understand, SAMP is something above TCP/IP, maybe session layer
protocol, am i right? And the problem is how to transmit security
attributes over TCP/IP. Casey said few months ago, that "ipv6 maybe a
reasonable alternative". I didn't looked through this standart yet, but i
know that it has DOI, and this idea was derived from TSIG work.

> Thoughts ? Comments ?

To Unsubscribe: send mail to majordomo at trustedbsd.org
with "unsubscribe trustedbsd-discuss" in the body of the message