This patchset adds support for policy capabilities to the toolchain/compiler and adds the netpeer capability key. I'm not sure how to best proceed with the sepol_setup_capability code since I'm not sure how we are going to toggle future capabilit ies. If anyone has ideas for how to generalize the setup code please let me know. -- -- This message was distributed to subscribers of the selinux mailing list. If you no longer wish to subscribe, send mail to majordomo@xxxxxxxxxxxxx with the words "unsubscribe selinux" without quotes as the message.