What is the rationale behind the selinux_audit_set_callback() mechanism? It looks for all the world as if the selinux code ought to be able to call the registered function directly. Casey Schaufler casey at schaufler-ca.com