> MarkM has figured out how to enforce VOC with object > capabilities. VOC has wider applicability than just > multilevel security. The term "enforce" here may be misleading. It is more correct to say that markm has figured out how to enable VOC. VOC, as you pointed out, is voluntary. --marcs