Enable SECURITY_NETWORK_XFRM

[Eric Paris]

On Thu, 2007-03-29 at 12:35 -0400, James Morris wrote:
> On Thu, 29 Mar 2007, Eric Paris wrote:
> 
> > Right before FC6 we turned off CONFIG_SECURITY_NETWORK_XFRM since there
> > was a lot of development still going on in that areas especially
> > concerning secid reconciliation between that and secmark.  The
> > reconciliation work was killed upstream and XFRM labeling has been
> > worked on upstream and has been tested by the LSPP group for quite some
> > time now with success.
> > 
> > I'd like to get both of them turned back on so Fedora users can make use
> > of xfrm labeled networking.
> 
> I definitely think it needs to be enabled, and I don't think it should 
> impact any normal users (you need to specially configure ipsec for 
> anything to happen).
> 
> Do we have the userland patches for racoon etc. in Fedora ?

I just checked and the rawhide ipsec tools appear to have all of the
patches the could be needed for labeled net to work.  I see no reason
this couldn't be turned on in both FC6 and devel.

-Eric