On Tue, Mar 26, 2019 at 12:20 PM Andy Lutomirski <luto@xxxxxxxxxx> wrote: > Ugh. Some of those files are very useful. Could this perhaps still > allow O_RDONLY if we're in INTEGRITY mode? The previous implementation did, but Greg wanted it to go away entirely.