This patch provides the ruleset based access control security framework and modules implementing various models (http://www.rsbac.org/models.htm) such as mandatory access control, a privacy model, a capabilities module, a process jail module, etc. Reproducible: Always Steps to Reproduce:
There is a kernel source tree just for this in the portage tree. I will see how much trouble it would be to incorporate into lolo/xfs/gentoo-sources as will livewire as time permits.
this is on the todo list. Jay