--- Stephen Smalley <[EMAIL PROTECTED]> wrote: > True, but a system that disables proc is likely a > system with a custom > policy anyway, and dependency on proc is fairly > basic to selinux these > days (due to reliance on /proc/self/attr for process > attribute > manipulation in place of the old selinux syscalls). > Possibly we should > just make selinux depend on proc and drop the #ifdef > there.
Alternativly you could move the SELinux specific bits out of /proc/self/attr into an equivalent /selinux/self/attr and avoid that /proc dependency. Casey Schaufler [EMAIL PROTECTED] - To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to [EMAIL PROTECTED] More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/