Stephen Smalley <sds@xxxxxxxxxxxxx> wrote: > Ah, wait - this is an automatic allocation of a per-uid keyring upon a > setuid() call, right? Yes. > and a single Linux uid might ultimately have a number of SELinux security > contexts running on its behalf. Indeed. It's not something that anyone considered at the time, I suppose. David -- This message was distributed to subscribers of the selinux mailing list. If you no longer wish to subscribe, send mail to majordomo@xxxxxxxxxxxxx with the words "unsubscribe selinux" without quotes as the message.