On Mon, Oct 16, 2017 at 2:03 PM, Mikhail Kurinnoi <viewizard@xxxxxxxxxxxxx> wrote: > В Mon, 16 Oct 2017 13:37:09 -0700 > Matthew Garrett <mjg59@xxxxxxxxxx> пишет: >> #define IMA_BPRM_APPRAISED 0x00002000 >> #define IMA_READ_APPRAISE 0x00004000 >> #define IMA_READ_APPRAISED 0x00008000 >> +#define IMA_CREDS_APPRAISE 0x00004000 >> +#define IMA_CREDS_APPRAISED 0x00008000 > > Is this correct, that the IMA_CREDS_APPRAISE and IMA_CREDS_APPRAISED > same as IMA_READ_APPRAISE and IMA_READ_APPRAISED? Definitely not correct, good catch. I'll resend with that fixed if people feel this approach is reasonable.