Bug 201570

Summary: secmark patch for iptables
Product: [Fedora] Fedora Reporter: Karl MacMillan <kmacmill>
Component: iptablesAssignee: Thomas Woerner <twoerner>
Status: CLOSED RAWHIDE QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: medium Docs Contact:
Priority: urgent    
Version: rawhideCC: dwalsh, jmorris, sgrubb
Target Milestone: ---   
Target Release: ---   
Hardware: All   
OS: Linux   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2007-08-02 12:04:26 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On:    
Bug Blocks: 201573, 205514    
Attachments:
Description Flags
Patch to add secmark to iptables package none

Description Karl MacMillan 2006-08-07 15:05:51 UTC 
Description of problem:

Iptables lacks the necessary patches to enable secmark. Secmark is a new network
labeling scheme for SELinux that is a priority for RHEL 5 / FC6. Most of the
work is complete:

1) Kernel portion is accepted upstream and included in rawhide kernels
2) Iptables patches are accepted upstream (can be found in iptables svn)

The latest iptables release (1.3.5) does _not_ include the necessary patches, so
the only work remaining is to include a simple backport in the rawhide packages.

I have attached a patch that is rebased to apply cleanly on top of the other
iptables patches in the current iptables rpm.

More information can be found at http://people.redhat.com/jmorris/selinux/secmark/.

Version-Release number of selected component (if applicable):
1.3.5 of iptables
Comment 1 Karl MacMillan 2006-08-07 15:05:57 UTC 
Created attachment 133740 [details]
Patch to add secmark to iptables package
Comment 2 Thomas Woerner 2006-08-28 15:08:28 UTC 
Please have a look at #201570.
Comment 3 Thomas Woerner 2006-08-28 15:08:58 UTC 
Please have a look at #201573.
Comment 4 Daniel Walsh 2006-08-28 16:53:04 UTC 
We need this patch.
Comment 5 Thomas Woerner 2007-08-02 12:03:27 UTC 
secmark is supported in iptables since package iptables-1.3.5-2.