[redhat-lspp] Toggle for unlabeled packets in labeled ipsec

[Linda Knippers]

Joy Latten wrote:
> I think the ability to toggle whether unlabeled packets
> will be accepted or rejected for labeled networking is required by lspp.
> Klaus, is that correct?

Is it required or does it just need to be audited if you allow it?
> 
> I noticed that netlabel has this ability via netlabelctl but could
> not readily find it for labeled ipsec.
> Would anyone know if we have this ability for labeled ipsec?

I don't know, but it sounds like a handy feature to have.

-- ljk
> 
> Regards,
> Joy
> 
> --
> redhat-lspp mailing list
> redhat-lspp at redhat.com
> https://www.redhat.com/mailman/listinfo/redhat-lspp