On Fri, 3 Apr 2009, David P. Quigley wrote: > We tried to change this to be dynamically allocated based on what was > coming off of the wire but we ran into a problem that it required us to > do allocations where they really shouldn't be done in the rpc/nfsv4 > code. Trond suggested to make this static and that if someone really > needed more than a page for their label that something was horrifically > wrong. I'm tempted to agree with him on this but there are people trying > to send contexts with an MLS component with every other compartment set > which tend to be really large. Well, future labels might include cryptographic information, for example. -- James Morris <jmorris@xxxxxxxxx> -- This message was distributed to subscribers of the selinux mailing list. If you no longer wish to subscribe, send mail to majordomo@xxxxxxxxxxxxx with the words "unsubscribe selinux" without quotes as the message.
