On Tue, 6 May 2008, Stephen Smalley wrote: > So, the question is should we just drop this hunk of the patch and only > support this functionality for setxattr, or do we need > selinux_inode_init_security() to recover the original context string > (which is available in the SID table, just not returned by > security_sid_to_context when it isn't defined by policy) and use that > for the on-disk xattr value? I think we need to use the "alternative" context if it exists, so yes. - James -- James Morris <jmorris@xxxxxxxxx> -- This message was distributed to subscribers of the selinux mailing list. If you no longer wish to subscribe, send mail to majordomo@xxxxxxxxxxxxx with the words "unsubscribe selinux" without quotes as the message.