On Wed, 19 Mar 2008, Casey Schaufler wrote: > Oh, cut the crap. What part of my explainations don't you understand? > > I understand the functionality. That is not my point. My point is > that inode_notifysecctx() explicitly prohibits the LSM from providing > integrity of the security attributes by introducing a differentiation > between the "in-core" and "on-disk" values, and making it explicit > that the one is set, but not the other. > > Clearly this is the direction you intend to go. Have fun with it. > I've raised the issue, y'all aren't seeing it. Maybe I'm wrong, > it has happened before. Please stop trolling. - James -- James Morris <jmorris@xxxxxxxxx> -- This message was distributed to subscribers of the selinux mailing list. If you no longer wish to subscribe, send mail to majordomo@xxxxxxxxxxxxx with the words "unsubscribe selinux" without quotes as the message.