This patch set does two things. First it factors the section of vfs_setxattr that does the real work into a helper function. This allows LSMs the ability to set the xattrs they need without hitting the permission check inside vfs_setxattr each time. Second it introduces two new hooks inode_{get,set}secctx. The first hook retreives all security information the LSM feels is relavent in the form of a security context. The second hook given this context can set the in-core and on-disk store for the particular inode. This differentiation is necessary since there are times when it is necessary only to set the in-core representation. -- To unsubscribe from this list: send the line "unsubscribe linux-fsdevel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html