There are > cases where the existing LSMs wanted the call > last, and those have been addressed as well. Is this just SELinux and mmap_min_addr? I didn't look at the code, but if this make it any better or worse, you can reverse them. We don't have some requirement to audit it, I just thought it was a good idea and don't much care if you revert to 'normal' -Eric -- This message was distributed to subscribers of the selinux mailing list. If you no longer wish to subscribe, send mail to majordomo@xxxxxxxxxxxxx with the words "unsubscribe selinux" without quotes as the message.