[grsec] define in ACLs

[John Logsdon]

The 'define' facility that enables set inclusion etc is powerful but I am
wondering where it can be put and whether there are any positional
significances.  The Gentoo documentation details the effects but:

1 Does the define token exist only after (ie below in the file) it has
been defined or does it exist globally?

2 If define is specified after a role/domain but in the subject section
(ie there are >0 subjects after it and before the next role/domain/eof),
is the token valid only for that role/domain or globally, subject to 1
above?

TIA

John

John Logsdon                               "Try to make things as simple
Quantex Research Ltd, Manchester UK         as possible but not simpler"
j.logsdon at quantex-research.com              a.einstein at relativity.org
+44(0)161 445 4951/G:+44(0)7717758675       www.quantex-research.com