On Friday, October 12, 2018 3:19 AM, John Johansen <john.johansen@xxxxxxxxxxxxx> wrote: > It isn't perfect but it manages consistency across distros as best as > can be achieved atm. Yeah, this is why I'm okay with the current series: it provides as consistent a view as possible, but leaves room for future improvements (like adding "+" or "!" or "all" or whatever). I'm curious to see what SELinux folks think of v5, though. I *think* I addressed all the concerns there, even Paul's "I want my distro default to not have extreme stacking" case too. -Kees -- Kees Cook Pixel Security