--- trunk/1.6.x/ccs-patch/README.ccs	2008/12/24 07:07:28	2003
+++ trunk/1.6.x/ccs-patch/README.ccs	2009/01/28 05:22:11	2079
@@ -1796,3 +1796,27 @@
 
       I meant to print SYAORAN-ERROR: message when error == -EPERM,
       but I was printing it when error == 0 since 1.6.0 .
+
+Fix 2009/01/05
+
+    @ Use kmap_atomic()/kunmap_atomic() for reading "struct linux_binprm".
+
+      As remove_arg_zero() uses kmap_atomic(KM_USER0), I modified to use
+      kmap_atomic(KM_USER0) rather than kmap().
+
+    @ Relocate definitions and functions.
+
+      To reduce exposed symbols, I relocated some definitions and functions.
+
+Fix 2009/01/28
+
+    @ Fix "allow_read" + "allow_write" != "allow_read/write" problem.
+
+      Since 1.6.0 , due to a bug in ccs_update_single_path_acl(),
+      appending "allow_read/write" entry didn't update internal "allow_read"
+      and "allow_write" entries. As a result, attempt to open(O_RDWR) succeeds
+      but open(O_RDONLY) and open(O_WRONLY) fail.
+
+      Workaround is to write an entry twice when newly appending that entry.
+      If written twice, internal  "allow_read" and "allow_write" entries
+      are updated.