On Fri, 10 Jan 2014 09:49:28 Paul Moore wrote: > Do we really need to worry about being able to load new policy into a old > kernel? In general I thought the backward compatible issue was that newer > kernels needed to support older userspace, not the other way around. Yes. One case is when you have a Xen server that uses the kernel from the Dom0 for the DomUs (which is easier than taking the DomU kernel to the Dom0). Another case is hardware compatability issues, being able to upgrade all user- space before dealing with hardware issues is a good option to have. Finally allowing the possibility of downgrading the kernel in case of discovering a bug in the new kernel is a good thing. -- My Main Blog http://etbe.coker.com.au/ My Documents Blog http://doc.coker.com.au/ _______________________________________________ Selinux mailing list Selinux@xxxxxxxxxxxxx To unsubscribe, send email to Selinux-leave@xxxxxxxxxxxxx. To get help, send an email containing "help" to Selinux-request@xxxxxxxxxxxxx.