> I'm providing 2 alternatives. One is TOMOYO 1.x (out of tree patches that
> require recompilation of kernel source package but can keep kernel ABI) and the
> other is AKARI (subset of TOMOYO 1.x but is a loadable kernel module).
I checked the config options required for AKARI. Of the 5 options
listed, one is not set in the current EL6 kernel:
# CONFIG_SECURITY_PATH is not set
You mentioned CONFIG_SECURITY_PATH is the one that breaks the kABI.
But TOMOYO 1.x would not?