> > if (!sbsec->behavior) {
> :::
> > The message itself is emitted based on the value of 'sbsec->behavior'
> > which I think should (may?) be SECURITY_FS_USE_XATTR.
>
> Ok, then when and who should set a correct value to sbsec->behavior?It might be selinux policy. If you have 'seinfo' command, try seinfo --fs_use. J. R. Okajima
