1.. SPDX-License-Identifier: GPL-2.0
2
3=================
4LSM/SeLinux secid
5=================
6
7flowi structure:
8
9The secid member in the flow structure is used in LSMs (e.g. SELinux) to indicate
10the label of the flow. This label of the flow is currently used in selecting
11matching labeled xfrm(s).
12
13If this is an outbound flow, the label is derived from the socket, if any, or
14the incoming packet this flow is being generated as a response to (e.g. tcp
15resets, timewait ack, etc.). It is also conceivable that the label could be
16derived from other sources such as process context, device, etc., in special
17cases, as may be appropriate.
18
19If this is an inbound flow, the label is derived from the IPSec security
20associations, if any, used by the packet.
21