From 4e3e3c8d4bebc221a7a3dfb10ed427660e2e3e32 Mon Sep 17 00:00:00 2001
From: Dmitry Vyukov <dvyukov@google.com>
Date: Fri, 3 Jan 2020 09:58:45 +0100
Subject: sys/linux: add netlabel descriptions

---
 sys/linux/vnet.txt | 7 ++++---
 1 file changed, 4 insertions(+), 3 deletions(-)

(limited to 'sys/linux/vnet.txt')

diff --git a/sys/linux/vnet.txt b/sys/linux/vnet.txt
index 4b158136c..af12f2120 100644
--- a/sys/linux/vnet.txt
+++ b/sys/linux/vnet.txt
@@ -396,7 +396,7 @@ ipv4_option_cipso {
 	tags	array[ipv4_option_cipso_tag]
 } [packed]
 
-cipso_doi = 0, 1, 2, SMACK_CIPSO_DOI_DEFAULT, SMACK_CIPSO_DOI_INVALID
+cipso_doi = CIPSO_V4_DOI_UNKNOWN, SMACK_CIPSO_DOI_DEFAULT, SMACK_CIPSO_DOI_INVALID, 1, 2, 3
 
 # https://tools.ietf.org/html/rfc2113
 ipv4_option_ra {
@@ -642,15 +642,16 @@ ipv6_tlv_calipso {
 } [packed]
 
 # TODO: checksum is generally incorrect.
-# TODO: domain should be flags, but it's unclear if we have any domains registered by default.
 ipv6_tlv_calipso_payload {
-	domain			int32be
+	domain			flags[calipso_doi, int32be]
 	compartment_length	bytesize4[compartment_bitmap, int8]
 	sensitivity_level	int8
 	checksum		int16
 	compartment_bitmap	array[int64]
 } [packed]
 
+calipso_doi = 0, 1, 2, 3
+
 ipv6_tlv_hao {
 	type	const[IPV6_TLV_HAO, int8]
 	len	bytesize[addr, int8]
-- 
cgit mrf-deployment