[PATCH] smack: dont compile ipv6 code unless ipv6 is configured

Casey Schaufler casey at schaufler-ca.com
Sun Jan 26 17:40:28 UTC 2025


On 1/26/2025 6:15 AM, Konstantin Andreev wrote:
> Casey Schaufler, 21 Jan 2025:
>> On 1/17/2025 8:36 AM, Konstantin Andreev wrote:
>>> I want to be sure that ipv6-specific code
>>> is not compiled in kernel binaries
>>> if ipv6 is not configured.
>>
>> The IPv6 Smack support really ought to be replaced with an
>> implementation of CALIPSO, now that it is available. The
>> conditional compilations that already exist have drawn no
>> small amount of well founded criticism. I will most likely
>> take this patch, but if you want to be extremely helpful
>> you could have a shot at CALIPSO for Smack.
>
> Actually, I am sharing the changes
> I have made to SMACK along the way,
> during development of other feature.

Thank you for the work you're doing. I'm curious about your "other feature".

>
> IPv6 in Smack is in my waiting list,
> but not in a focus right now.

I appreciate any work you're putting into Smack.

> -- 
> Regards, Konstantin Andreev
>



More information about the Linux-security-module-archive mailing list