On Wed, Oct 26, 2011 at 6:51 AM, Tetsuo Handa <from-centos at i-love.sakura.ne.jp> wrote: > I'm providing 2 alternatives. One is TOMOYO 1.x (out of tree patches that > require recompilation of kernel source package but can keep kernel ABI) and the > other is AKARI (subset of TOMOYO 1.x but is a loadable kernel module). > http://akari.sourceforge.jp/comparison.html I checked the config options required for AKARI. Of the 5 options listed, one is not set in the current EL6 kernel: # CONFIG_SECURITY_PATH is not set You mentioned CONFIG_SECURITY_PATH is the one that breaks the kABI. But TOMOYO 1.x would not? Akemi