On Wed, 2004-12-08 at 08:26, Serge E. Hallyn wrote: > So something like the following patch might be appropriate? It removes > the redundant capset_check code, moving capset_check to right before each > call to capset_set, and moves the selinux_capset_set authentication code > into capset_check. Yes, that seems cleaner to me, and eliminates the ordering problem. -- Stephen Smalley <sds@private> National Security Agency
This archive was generated by hypermail 2.1.3 : Wed Dec 08 2004 - 05:42:25 PST