> > can you move "extern security_xxx" to somewhere more appropriate?
> 
> sure, just suggest where.. as you can see this is XXX'd as i have no
> idea where they would fit better. :/

i thought i suggested "near defcorename".  ie. resourcevar.h
i'm not sure if it's the best place, but it's better than sysctl.h, at least.

i don't think security.h is a good idea, for the same reason as
sysctl "security" top level node.

YAMAMOTO Takashi