On Wed, 2004-11-24 at 10:30, Darrel Goeddel wrote:
> The prohibition works for us. Would you like a new patch with these changes?

Yes, please make that change and confirm via testing that it properly blocks attempts by multi-threaded processes to set their current context.

-- 
Stephen Smalley <sds@epoch.ncsc.mil>
National Security Agency


--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.