On 6/20/16 9:04 AM, Daniel De Graaf wrote: > This operation has no known users, and is primarily useful when an MLS > policy is in use (which has never been shipped with Xen). In addition, > the information it provides does not actually depend on hypervisor > state (only on the XSM policy), so an application that needs it could > compute the results without needing to involve the hypervisor. > So if I read this language correctly. Removing this does not affect someone being able to build a MLS policy at a later date right? -- Doug Goldstein