Oh ok thanks On Thu, Jul 26, 2012 at 6:21 PM, Joe Nall <joe@xxxxxxxx> wrote: > > On Jul 26, 2012, at 8:15 PM, William Roberts <bill.c.roberts@xxxxxxxxx> wrote: > >> How did you determine that c42 doesn't dominate c16? > > Category dominance is having the same or a superset of the category bits. Using your category bits: > > s0:c16,c42 dominates s0:c16,c42, s0:c16, s0:c42 and s0 > s0:c42 dominates s0:c42 and s0 > s0:c16 dominates s0:c16 and s0 > > joe -- Respectfully, William C Roberts -- This message was distributed to subscribers of the selinux mailing list. If you no longer wish to subscribe, send mail to majordomo@xxxxxxxxxxxxx with the words "unsubscribe selinux" without quotes as the message.