how to trigger CALIPSO netlable opt insert

[T. Williams]

Hello,
i want to trigger this line of code but the hop variable always ends up as NULL when I send an Ipv6 calipso packet In order to do that get the hop as non-NULL I think I need calipso_opt_getattr to be called. That requires selinux_netlbl_socket_setsockopt to set the secattr type to NETLBL_NLTYPE_CALIPSO here (it follows from selinux_netlbl_socket_setsockopt -> netlbl_sock_getattr -> calipso_opt_getattr). However when I do this I still get that hop is NULL in the

code: .

Is there any way I trigger this line of code from userspace? Where or who should I ask this question to?

[Paul Moore]

As I mentioned to you earlier, the LSM list is likely the best forum
for this question.

Beyond that, what Linux distribution are you using, what LSMs do you
have enabled, and how are you configuring the LSMs and NetLabel?

--
paul-moore.com