On Monday, October 28, 2013 03:26:12 PM Stephen Smalley wrote: > Alternatively, we could go with this one to ensure that in the enforcing > case, we get EACCES rather than EINVAL back in the original caller. Unless there have been reports of applications not being able to deal with errors other than EACCESS, I'm in favor of not masking EINVAL in the enforcing case. -- paul moore www.paul-moore.com -- This message was distributed to subscribers of the selinux mailing list. If you no longer wish to subscribe, send mail to majordomo@xxxxxxxxxxxxx with the words "unsubscribe selinux" without quotes as the message.