On Thu, Mar 27, 2014 at 5:46 AM, Thomas Bächler >The fact that these LSMs must be compiled into the kernel and cannot be built as modules tells you something important: These options change the behaviour of the kernel at its core. I was under the impression that this was s security feature to make it a bit more difficult to switch off your configured LSM. -- Pete