--- mac_mls.txt.bak Sun Dec 1 21:20:29 2002 +++ mac_mls.txt Sun Dec 1 21:19:51 2002 @@ -110,7 +110,7 @@ over the interface. IMPLEMENTATION NOTES - Currently, the mac_mls policy relies on superuser status (suser_cred(9)) + Currently, the mac_mls policy relies on superuser status (suser(9)) in order to change network interface MLS labels. This will eventually go away, but it is currently a liability and may allow the superuser to bypass MLS protections.