I'd rather pass in the rule type to the AVRule init rather than a boolean about this being a dontaudit rule. Karl On Wed, Feb 24, 2010 at 3:20 PM, Daniel J Walsh <dwalsh@xxxxxxxxxx> wrote: > > -- This message was distributed to subscribers of the selinux mailing list. If you no longer wish to subscribe, send mail to majordomo@xxxxxxxxxxxxx with the words "unsubscribe selinux" without quotes as the message.