[PATCH] smack: dont compile ipv6 code unless ipv6 is configured
Konstantin Andreev
andreev at swemel.ru
Sun Jan 26 14:15:50 UTC 2025
Casey Schaufler, 21 Jan 2025:
> On 1/17/2025 8:36 AM, Konstantin Andreev wrote:
>> I want to be sure that ipv6-specific code
>> is not compiled in kernel binaries
>> if ipv6 is not configured.
>
> The IPv6 Smack support really ought to be replaced with an
> implementation of CALIPSO, now that it is available. The
> conditional compilations that already exist have drawn no
> small amount of well founded criticism. I will most likely
> take this patch, but if you want to be extremely helpful
> you could have a shot at CALIPSO for Smack.
Actually, I am sharing the changes
I have made to SMACK along the way,
during development of other feature.
IPv6 in Smack is in my waiting list,
but not in a focus right now.
--
Regards, Konstantin Andreev
More information about the Linux-security-module-archive
mailing list