On Sun, Apr 24, 2005 at 02:17:36PM -0700, Matthew Dillon wrote:
> It can be removed. I think syscall filtering is a better way to do
> MAC (and syscall filtering ties in with some virtualization stuff that
> I want to do too).
I'm not sure if it can be done with syscall filtering, but supporting MAC
will be a huge beast we won't work on for months / years. So it can be removed
for now.
Joerg