Re: [ libsepol 0/6] Context reorganization

[Joshua Brindle <jbrindle@tresys.com>]

Ivan Gyurdiev wrote:

>>The purpose of the cache is so that we don't have to do expansion of the 
>>type sets every time we want to validate a context (since this happens 
>>before expansion). The cache is built from policydb_index_others so if 
>>you are't calling that it won't be built. This should work fine with an 
>>already expanded policy since type_set_expand will just copy the type 
>>bitmap to the cache.
>>    
>>
>
>policydb_index_others is called when I do a policydb_read to
>load the base policy, but at that point no users are loaded... 
>then later when I load a user, and try to check a context, it fails
>on the cache check.
>  
>
well, that is because the cache bitmap is empty. I'm not sure exactly 
what the order you do things in but you'll need to either call 
policydb_index_others after you've loaded all the users in or 
hashtab_map policydb_user_cache (not recommended), or fill in the cache 
bitmap yourself when loading the users in (really not recommended!)


--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.