Re: [IPsec] WGLC of draft-ietf-ipsecme-labeled-ipsec

[Benjamin Kaduk <[e-mail]>]

On Tue, Jul 27, 2021 at 11:16:36PM -0400, Paul Wouters wrote:
> On Tue, 27 Jul 2021, Tero Kivinen wrote:
> 
> > This is the start of 2 week WGLC on the
> > draft-ietf-ipsecme-labeled-ipsec document, ending 2021-08-10.
> >
> > Please submit your comments to the list, also send a note if you have
> > reviewed the document, so we can see how many people are interested in
> > getting this out.
> 
> I'm an author, so obviously I am interested. Also, the code point is
> allocated so I think we are beyond the point of meassuring "interest" :)
> 
> But it would be good to know if the document has any issues, since we
> can then still fix them. We also have an implementation (libreswan with 
> Linux).
> 
> Note that the IKE negotiation part of labels was pretty straightforward.
> 
> The Linux SElinux labels implementation is not. I will likely write up
> an informational draft about the Linux kernel implementation and usage.

I am not 100% sure, but I think the NFSv4 WG might be interested to hear
about such a document as well.  There was some controversy about one of the
nfsv4 documents and whether it could proceed without some stable definition
of what the linux labels actually mean.

-Ben