CIPSO Labeling of Network Packets to/from KVM Windows Guest OS

[djackso1 at rockwellcollins.com]

Is there any method by which KVM in conjunction with Netlabel or other 
labeling function can be configured such that  a statically configured 
label
 is added for all outgoing network traffic generated by a specific Windows 
Guest OS instance 
is verified and then removed for all incoming network traffic delivered to 
a specific Windows Guest OS instance

in a manner which is transparent to Windows and Windows applications?
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.fedoraproject.org/pipermail/selinux/attachments/20120106/a20f5206/attachment.html>