On Fri, 22 Apr 2005, Steve Brueckner wrote: > return ephemeral ports. Or is there a chance of re-visiting the idea of > getting labeled networking into the kernel? Work is being done on labeled networking via IPsec, see Trent Jaeger's paper at http://www.selinux-symposium.org/2005/agenda.php - James -- James Morris <jmorris at redhat.com>