Casey Schaufler <casey@xxxxxxxxxxxxxxxx> wrote: > With Smack you can leave the label alone, raise CAP_MAC_OVERRIDE, > do your business of setting the label correctly, and then drop > the capability. No new hooks required. That sounds like a contradiction. How can you both leave it alone and set it? David
