On Mon, Apr 06, 2009 at 07:03:32AM -0400, Santosh Chokhani wrote: > I view SPIF as performing the following functions: converting machine to > human representation and vice versa; establishing equivalency between > two labeling policies, and defining which labels with the lattice are > valid and which are invalid. If I understand Russ' comment correctly the difficulty with SPIF lies in the label equivalency concept. I think there's a better solution for dealing with the idea that parts of a policy are classified differently than others. Nico -- -- This message was distributed to subscribers of the selinux mailing list. If you no longer wish to subscribe, send mail to majordomo@xxxxxxxxxxxxx with the words "unsubscribe selinux" without quotes as the message.