Documentation/netlabel/draft-ietf-cipso-ipsecurity-01.txt

27 Please check the I-D abstract listing contained in each Internet Draft
46 mandatory access controls and multi-level security.  These systems are
88 once in a datagram.  All multi-octet fields in the option are defined to be
91 +----------+----------+------//------+-----------//---------+
93 +----------+----------+------//------+-----------//---------+
124 corresponding ASCII representations.  Non-related groups of systems may
148 actual security information to be passed.  All multi-octet fields in a tag
171 +----------+----------+--------//--------+
173 +----------+----------+--------//--------+
207 This is referred to as the "bit-mapped" tag type.  Tag type 1 is included
211 +----------+----------+----------+----------+--------//---------+
213 +----------+----------+----------+----------+--------//---------+
297 +----------+----------+----------+----------+-------------//-------------+
299 +----------+----------+----------+----------+-------------//-------------+
360 +----------+----------+----------+----------+------------//-------------+
362 +----------+----------+----------+----------+------------//-------------+
415 assumed to be 0.  The ranges MUST be non-overlapping and be listed in
423 the non-optimized form.  In addition, a CIPSO implementation MUST be able
449 HOST_LABEL_MAX - This parameter contains the maximum sensitivity label that
452 parameter does not apply to CIPSO gateways or routers.  This parameter need
467 HOST_LABEL_MIN - This parameter contains the minimum sensitivity label that
468 a CIPSO host is authorized to handle.  All datagrams that have a label less
469 than this minimum MUST be rejected by the CIPSO host.  This parameter does
470 not apply to CIPSO gateways or routers.  This parameter need not be defined
474 PORT_LABEL_MAX - This parameter contains the maximum sensitivity label for
477 rejected by the CIPSO system.  The label within this parameter MUST be
478 less than or equal to the label within the HOST_LABEL_MAX parameter.  This
479 parameter does not apply to CIPSO hosts that support only one network port.
481 PORT_LABEL_MIN - This parameter contains the minimum sensitivity label for
483 outgoing datagrams that have a label less than this minimum MUST be
484 rejected by the CIPSO system.  The label within this parameter MUST be
485 greater than or equal to the label within the HOST_LABEL_MIN parameter.
486 This parameter does not apply to CIPSO hosts that support only one network
489 PORT_DOI - This parameter is used to assign a DOI identifier value to a
492 hosts and gateways MUST support either this parameter, the NET_DOI
493 parameter, or the HOST_DOI parameter.
495 NET_DOI - This parameter is used to assign a DOI identifier value to a
498 CIPSO hosts and gateways MUST support either this parameter, the PORT_DOI
499 parameter, or the HOST_DOI parameter.
501 HOST_DOI - This parameter is used to assign a DOI identifier value to a
504 hosts and gateways MUST support either this parameter, the PORT_DOI
505 parameter, or the NET_DOI parameter.
545 only required to support a NET_LABEL parameter.  This parameter contains
548 is not equivalent to the NET_LABEL parameter.
557 lead to non-interoperability or even a security incident.  The
577 recognized the IP datagram is discarded and an ICMP "parameter problem"
579 parameter" (code 0) and the pointer is set to the start of the CIPSO field
613 unrecognized tag type MUST be treated as a "parameter problem" and
626 networks that have CIPSO and non-CIPSO hosts and the non-CIPSO hosts
630 discarded and an ICMP "parameter problem" (type 12) is generated and
665 the PORT_DOI configuration parameter MUST contain the DOI identifier to
666 use.  If network level DOI assignment is used, then the NET_DOI parameter
668 is employed, then the HOST_DOI parameter MUST contain the DOI identifier
732 cipso-request@wdl1.wdl.loral.com.