Hello, Rik van Riel wrote: > Why does the Tomoyo patch have its own hooks in various > places sitting right next to the LSM hooks? There are two reasons. One is to support both 2.4 kernels and 2.6 kernels. The other is some parameters are missing for TOMOYO Linux. TOMOYO needs "struct vfsmnt" parameter to calculate realpath(2), but this parameter is unavailable after entring into the vfs functions (for example, vfs_mknod()) and unable to use (for example, security_inode_mknod()). Also not all hooks needed for TOMOYO Linux are provided by LSM. For example, a hook for SAKURA_MayAutobind() is not provided by LSM. By the way, the kickstart guide is now available at http://tomoyo.sourceforge.jp/en/kickstart/ . If you have private questions, you can send mails to tomoyo-support _at_ lists.sourceforge.jp . Regards... -- Kernelnewbies: Help each other learn about the Linux kernel. Archive: http://mail.nl.linux.org/kernelnewbies/ FAQ: http://kernelnewbies.org/faq/