[redhat-lspp] auditing labeled ipsec

[Paul Moore]

Steve Grubb wrote:
> On Wednesday 11 October 2006 16:40, Joy Latten wrote:
> 
>>The other is pfkeyv2, which our setkey and racoon uses.
> 
> What is pfkeyv2? IOW is it a syscall or how do you call it?

PF_KEYv2 is a socket family/protocol defined by RFC2367 whose original goal was
to standardize the interface between the in-kernel IPsec bits and the userland
key management daemon.  It has it's problems but it also has a lot of
cross-platform support.

-- 
paul moore
linux security @ hp