On Tue, 2004-08-24 at 05:28, Luke Kenneth Casson Leighton wrote: > if the file_contexts stuff was somehow pre-munged and > transferred into kernel, and the regexp matching code (or > something similar) was _also_ transferred into the kernel, > then this problem would go away. Bad idea. The kernel only deals with file contexts via attributes on inodes that are set by some userspace entity; it does not deal with the file contexts configuration, nor should it. -- Stephen Smalley <sds@xxxxxxxxxxxxxx> National Security Agency