On Mon, Jan 4, 2010 at 1:36 PM, Stephen Smalley <sds at tycho.nsa.gov> wrote: > Likely introduced by Eric's short cut for checking /proc/filesystems and > bailing immediately in the non-selinux case. Try this: There are a couple of other leakage cases to worry about. I submitted a patch here: http://userspace.selinuxproject.org/trac/ticket/10 --Ed