Casey Schaufler <casey at schaufler-ca.com> wrote: > With Smack you can leave the label alone, raise CAP_MAC_OVERRIDE, > do your business of setting the label correctly, and then drop > the capability. No new hooks required. That sounds like a contradiction. How can you both leave it alone and set it? David