用SELinux加强网络安全(2)

client.c【译者注：内容见附录A】
server.c【译者注：内容见附录B】
编译它们并将其连接到libselinux：
gcc -o client client.c -lselinux
gcc -o server server.c –lselinux

[root@poisonivy ~]# ./client 192.168.147.132 
getpeercon: Protocol not available Received: Hello, (null) from (null)
[root@scarecrow ~]# ./server 
getsockopt: Protocol not available server: got connection from 
192.168.147.130, (null) 
getpeercon()返回协议不可用，因为在本次连接中没有标记被启用，你可以根据
错误信息来判断你是否使用了标记网络套接字。

[root@scarecrow ~]# cat dev/ipsec/setkey.scarecrow.test 
spdflush; 
flush; 
spdadd 192.168.147.130 192.168.147.132 any
-P in ipsec esp/transport//require; 
spdadd 192.168.147.132 192.168.147.130 any 
-P out ipsec esp/transport//require; 
[root@poisonivy ~]# cat dev/ipsec/setkey.poisonivy.test 
spdflush; 
flush; 
spdadd 192.168.147.132 192.168.147.130 any 
-P in ipsec esp/transport//require; 
spdadd 192.168.147.130 192.168.147.132 any 
-P out ipsec esp/transport//require; 

[root@poisonivy ~]# setkey -f dev/ipsec/setkey.poisonivy.test 
[root@scarecrow ~]# setkey -f dev/ipsec/setkey.scarecrow.test