intros; intro;
eapply
(NoMACObjChange s o (files s) (directories s) (acl s)
(subjectSC s) (secmat s)).
generalize H; elim s; simpl in |- *; auto.
Qed.

(* Specifications: *)
Lemma NoMACSubChange :
forall (s : SFSstate) (u : SUBJECT)
(ACL : set (OBJECT * AccessCtrlListData)) (OSC : set (OBJECT * SecClass))
(FILES : set (OBJECT * FILECONT)) (DIRECTS : set (OBJECT * DIRCONT))
(SM : set (OBJECT * ReadersWriters)),
~
MACSubCtrlAttrHaveChanged s
(mkSFS (groups s) (primaryGrp s) (subjectSC s) (AllGrp s)
(RootGrp s) (SecAdmGrp s) OSC ACL SM FILES DIRECTS) u.