Hello, It seems that whenever we write to a file (to update its content), the file mode is always updated. Specifically I observe that function (LSM hook) below: security_inode_setattr(struct dentry *dentry, struct iattr *attr) is always called twice: - 1st time is with attr->ia_valid == ATTR_MODE|ATTR_CTIME - 2nd time is with attr->ia_valid == ATTR_SIZE|ATTR_CTIME I wonder why the file mode is always updated? Anybody could please clarify on this matter? The linux kernel I am working on is 2.6.12.4 Many thanks, and happy new year 2006 to everybody :-) Hieu -- Kernelnewbies: Help each other learn about the Linux kernel. Archive: http://mail.nl.linux.org/kernelnewbies/ FAQ: http://kernelnewbies.org/faq/