On Wed, 6 Feb 2008, Stephen Smalley wrote: > Should likely make this something like: > printk(KERN_WARNING "SELinux: unknown capability %d\n", cap); > if (selinux_enforcing) > return -EPERM; Also, make this printk_ratelimit() to prevent DoS. -- James Morris <jmorris@xxxxxxxxx> -- This message was distributed to subscribers of the selinux mailing list. If you no longer wish to subscribe, send mail to majordomo@xxxxxxxxxxxxx with the words "unsubscribe selinux" without quotes as the message.