From: dwalsh@redhat.com (Daniel J Walsh)
Date: Tue, 24 Mar 2009 10:02:50 -0400
Subject: [refpolicy] system_ipsec.patch
Message-ID: <49C8E80A.2060507@redhat.com>
To: refpolicy@oss.tresys.com
List-Id: refpolicy.oss.tresys.com

http://people.fedoraproject.org/~dwalsh/SELinux/F11/system_ipsec.patch

Lots of new file context for ipsec

ipsec calls getpw
needs setsched

uses lots of different kinds of sockets

Listens on the isakmpo and ipsecnat ports

mgmt sends syslog packets

racoon also calls getpw