Fixed level part of patch > This is very similar to the existing getseuser utility that likewise > does a getseuserbyname() but then calls > get_ordered_context_list_with_level() and displays all of the contexts > in it. Differences are that you permit specification of the role (and > level, if fixed) via options and you only get the default value rather > than the entire list. I found this test program much easier to figure out what the application (locallogin, sshd ...) would do when I logged in. Probably be worth while adding some of the mls constraints tests in also. IE Make sure mls is working so if I have a process running s0:s0 it can't generate a SystemHigh user, as well as a user with s0:s0 can not ask for a level of SystemHigh.