One more thing ... I wrote: > if (!(uid-checks-out-okay) && !capable(CAP_XYZ)) should be changed to: if (!capable(CAP_XYZ) && !(uid-checks-out-okay)) if C+R is going to be the Official way to use LSM. Otherwise, the architecture is going to advocate (require?) that code with potential side-effects get executed in cases where it is at best unnecessary and in some cases (side effects) may cause the system to break. -- Casey Schaufler Manager, Trust Technology, SGI caseyat_private voice: 650.933.1634 casey_pat_private Pager: 888.220.0607 _______________________________________________ linux-security-module mailing list linux-security-moduleat_private http://mail.wirex.com/mailman/listinfo/linux-security-module
This archive was generated by hypermail 2b30 : Mon Nov 12 2001 - 09:04:22 PST