I have been requested by some container people to make this only readable not writable to prevent certain types of attacks on the kernel. No idea if this is a good idea or not. _______________________________________________ Selinux mailing list Selinux@xxxxxxxxxxxxx To unsubscribe, send email to Selinux-leave@xxxxxxxxxxxxx. To get help, send an email containing "help" to Selinux-request@xxxxxxxxxxxxx.