On Wed, 19 Sep 2007, Paul Moore wrote:

> Just for clarification James, what is the motivation for making the permission
> checks conditional? Performance? Compatibility?

Performance -- per packet checks which are not doing anything for the vast majority of users are undesirable.

-- 
James Morris
<jmorris@namei.org>

--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.