user message limits

[Casey Schaufler]

James W. Hoeft wrote:
> The requirement to include the entire cut buffer was only for high to
> low (downgrade) transfers (which are only allowed for text), and was a
> "derived" requirement, in that we had to include the text in the audit
> logs in order to get approval to provide that capability.

... if she floats, she weighs less than a duck, and that makes her
    a witch! Burn her!

    How did you become so wise in the ways of science?


Ah yes, evaluators. There were several places in the CMW spec
that pretty well required things that it also forbade you from
doing. It explains much.