Diagram of internal layout of new ACL system

[spender]

Note that most of the lines in the diagram go both ways...and I've taken out things that aren't very important to how lookups/create/rename/delete are done to preserve the neatness of the diagram. All of this internal design will be oblivious to the high level functions. Of course creating this structure in userspace is going to be hell... but such is life.

http://grsecurity.net/grsec2dia.png

-Brad