This is a relatively minor update to the previous, "v6", patchset which the main difference being an attempt at cleaning up all of the compatibility code in the SELinux networking hooks. The patches might look a bit ugly but I believe the resulting code is much cleaner than in "v6" and should be easier to understand/maintain in the long run. I also took the opportunity to update the SELinux compat_net code to make better use of the socket's security struct which allows us to do away with the spinlock in sock_rcv_skb() and cleanup some of that code. I've updated the git tree last night with these bits backed against Linus' latest which includes the ebitmap patch needed with "v6". The git tree can be found here: * git://git.infradead.org/users/pcmoore/lblnet-2.6_testing There have also been a few small bugfixes to the static_label branch of netlabel_tools. For those of you who are playing with this code I recommend you update to r50 to get the latest bits. As usual, if you have any comments/bug-reports/questions let me know. -- paul moore linux security @ hp -- This message was distributed to subscribers of the selinux mailing list. If you no longer wish to subscribe, send mail to majordomo@xxxxxxxxxxxxx with the words "unsubscribe selinux" without quotes as the message.