On Wed, 30 Jul 2008, Stephen Smalley wrote: > Unfortunate since we'd prefer to have the DAC checks applied first, and > since inode_change_ok() may alter the ia_mode in response to those > checks, but it does seem inconsistent at present and it doesn't yield > any difference in the ltp selinux testsuite results. No LSM seems to be using ia_mode, so that aspect is ok. The DAC checks are generally not being applied first currently, so common case behaviour doesn't change with this patch. Acked-by: James Morris <jmorris@xxxxxxxxx> -- James Morris <jmorris@xxxxxxxxx> -- To unsubscribe from this list: send the line "unsubscribe linux-fsdevel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html