Matthew Riley: > The IMA policy includes this line, which is probably of interest here: > audit func=FILE_MMAP mask=MAY_EXEC
I see. But isn't it func=MMAP_CHECK? Anyway, I hope you won't mind dropping security_mmap_file() call in aufs_mmap() for the branch-fs file. security_mmap_file() for the aufs file is (still) called by VFS/MM. J. R. Okajima ------------------------------------------------------------------------------ Is your legacy SCM system holding you back? Join Perforce May 7 to find out: • 3 signs your SCM is hindering your productivity • Requirements for releasing software faster • Expert tips and advice for migrating your SCM now http://p.sf.net/sfu/perforce
