On Jul 26, 2012, at 8:15 PM, William Roberts <bill.c.roberts@xxxxxxxxx> wrote: > How did you determine that c42 doesn't dominate c16? Category dominance is having the same or a superset of the category bits. Using your category bits: s0:c16,c42 dominates s0:c16,c42, s0:c16, s0:c42 and s0 s0:c42 dominates s0:c42 and s0 s0:c16 dominates s0:c16 and s0 joe -- This message was distributed to subscribers of the selinux mailing list. If you no longer wish to subscribe, send mail to majordomo@xxxxxxxxxxxxx with the words "unsubscribe selinux" without quotes as the message.