smack-team/smack — pull request #19 by jarkkos (2013-10-08 13:48:54+00:00)
Title: Fix: allow CIPSO labels with zero categories

There was false restriction in smack_cipso_add_from_file() that
disallowed CIPSO labels without categories.

For example, this example given in the SMACK kernel documentation
should be perfectly legal:

TopSecret 7