From: dwalsh@redhat.com (Daniel J Walsh)
Date: Fri, 04 Jun 2010 10:53:17 -0400
Subject: [refpolicy] kernel_corenetwork.te.in.patch
In-Reply-To: <1275659561.809.52.camel@gorn.columbia.tresys.com>
References: <4C06BC99.5070505@redhat.com>
	<1275659561.809.52.camel@gorn.columbia.tresys.com>
Message-ID: <4C09135D.5070908@redhat.com>
To: refpolicy@oss.tresys.com
List-Id: refpolicy.oss.tresys.com

On 06/04/2010 09:52 AM, Christopher J. PeBenito wrote:
> On Wed, 2010-06-02 at 16:18 -0400, Daniel J Walsh wrote:
>> http://people.fedoraproject.org/~dwalsh/SELinux/F14/kernel_corenetwork.te.in.patch
>>
>> tun_tap_device is an mls trusted object
>
> Why?  This seems wrong to me.
>
>> Lots of new port definitions.
>
I think virtual machines at different levels need to talk to this device.