On Tue, 2009-04-14 at 14:42 -0400, Colin Walters wrote: > Hi, > > I'd like broader input on: > http://bugs.freedesktop.org/show_bug.cgi?id=21072 > > Is this something we can do inside libselinux itself? Or are we > planning similar patches around avc_has_perm calls for the X server, > libvirt and other userspace programs? I agree with you - this should be handled within libselinux if it gets handled at all, not in the callers of avc_has_perm(). -- Stephen Smalley National Security Agency -- This message was distributed to subscribers of the selinux mailing list. If you no longer wish to subscribe, send mail to majordomo@xxxxxxxxxxxxx with the words "unsubscribe selinux" without quotes as the message.