Hello, With help from Neil I have the actual daemon code working for DOI translations. Now I have to come up with an interface for allowing an LSM to specify its translations. Either in the form of a separate library or in the daemon code itself I intend to dlopen a shared library and make calls into it. The question is what functionality do we want here and where should it be placed. In the long run it would be nice to have a server which maintains the mappings for all of the clients in its domain similar to kerberos. However the client also needs to be able to operate without such a server. If you have suggestions for this feel free to make them now while I am still designing this. Dave -- This message was distributed to subscribers of the selinux mailing list. If you no longer wish to subscribe, send mail to majordomo@xxxxxxxxxxxxx with the words "unsubscribe selinux" without quotes as the message.