OpenSolaris

1. Project: Labeled IPsec
   1. Leaders
   2. Observers
   3. Original Project Proposal
   4. Design Review
   5. Events

Labeled IPsec Phase 1 Design Review

We are now doing a technical design review of the first phase of Labeled IPsec.

This project adds a minimal Labeled IPsec capability to the kernel IPsec code, and a related set of changes to the (closed-source) Solaris IKE to provide minimal support for managing and negotiatiating sensitivity labels between systems under common management. This project is intended to lay the groundwork for follow-on work involving greater flexibility both in label policy and in the types of labels handled; however, support for other types of labels is out of scope for this phase.

• Review period: COMPLETED
• Original Review Document, version 0.3
• Revised Review Document, version 0.4

How to participate

• Join the security-discuss mail alias on opensolaris.org.
• Send technical review comments ONLY to that alias. Please do NOT cross post review comments to any other alias; if you believe other communities should be involved in the review, please contact the project lead (Bill Sommerfeld; sommerfeld at sun dot com).