On Fri, Apr 22, 2011 at 08:25:20AM -0700, Andi Kleen wrote: > > This seems to miss the hunk in fs/namei.c where the LSM hook is called. > > namei.c doesn't need changes because it already passes in the flags > The changed semantics only "start" in security/security.c