0001 .. SPDX-License-Identifier: GPL-2.0
0002
0003 =================
0004 LSM/SeLinux secid
0005 =================
0006
0007 flowi structure:
0008
0009 The secid member in the flow structure is used in LSMs (e.g. SELinux) to indicate
0010 the label of the flow. This label of the flow is currently used in selecting
0011 matching labeled xfrm(s).
0012
0013 If this is an outbound flow, the label is derived from the socket, if any, or
0014 the incoming packet this flow is being generated as a response to (e.g. tcp
0015 resets, timewait ack, etc.). It is also conceivable that the label could be
0016 derived from other sources such as process context, device, etc., in special
0017 cases, as may be appropriate.
0018
0019 If this is an inbound flow, the label is derived from the IPSec security
0020 associations, if any, used by the packet.
