[redhat-lspp] Re: [RFC] [MLSXFRM 02/04] Add enforcement to SE Linux LSM

[Venkat Yekkirala]

> > The extra level of indirection provided by the flow makes things a  
> > bit harder to follow, so I think that this should be made clear in  
> > documentation somehow.  I am not sure if people will be able to  
> > maintain this notion easily later.  My understanding is below.
> 
> It would be lot a easier if people looked at this in terms of "flow".

The "indirection" is necessary and the "flow" has always been there since we
don't always have a socket (forward case again). We just needed to go with
the flow :)