Hi, OK, I think the attached patch does _everything _ we discussed. It: - removes 8 syscalls for the normal path - ensures /selinux is trully an selinuxfs - drops back to detecting the old way when /selinux is missing - changes the old way in is_enabled to use fopen for glibc internal retries - adds retry for EINTR in mls_enabled - keeps SELINUX_MAGIC private Signed-off-by: Steve Grubb ____________________________________________________________________________________ Cheap talk? Check out Yahoo! Messenger's low PC-to-Phone call rates. http://voice.yahoo.com