ACL-0.5 release
Ilmar S. Habibulin
ilmar at ints.ru
Tue Dec 5 06:13:20 GMT 2000
On Mon, 4 Dec 2000, richard offer wrote:
> * How do you provide network labeling support? Do you use RIPSO or
> * CIPSO? How about interoperability with other trusted systems?
> CIPSO and SAMP would be nice :-)
Where can i find protocol descriptions? I managed to find only CIPSO
option number 134 (i suppose).
> In theory, the SAMP code could be shared between BSD and Linux, its a
> deamon, and if I looked there's probably Trusted Irix code on oss.sgi.com.
Does SAMP code included in ob1?
> I (we) don't have a design for the linux version yet, but initial thoughts
> are to hook it into the kernel via netfilter...
As i understand, SAMP is something above TCP/IP, maybe session layer
protocol, am i right? And the problem is how to transmit security
attributes over TCP/IP. Casey said few months ago, that "ipv6 maybe a
reasonable alternative". I didn't looked through this standart yet, but i
know that it has DOI, and this idea was derived from TSIG work.
> Thoughts ? Comments ?
To Unsubscribe: send mail to majordomo at trustedbsd.org
with "unsubscribe trustedbsd-discuss" in the body of the message
More information about the trustedbsd-discuss
mailing list