Re: [ libsepol 0/6] Context reorganization

[Joshua Brindle <jbrindle@tresys.com>]

Ivan Gyurdiev wrote:

>>you have to index the policy if you want to validate contexts, it's a 
>>necessity that won't go away
>>    
>>
>
>I maintain the reverse tables properly - I just don't call 
>the functions you expect me to, and neither does 
>sepol_genusers_policydb. It looks like it's necessary to add:
>
>        /* This pre-expands the roles and users for context validity
>checking */
>        if (hashtab_map(p->p_roles.table, policydb_role_cache, p))
>                return -1;
>
>to policydb_reindex_users().
>  
>
No, this will expand the type_sets for each role, which should already 
be done by index_others. You'll want to use policydb_user_cache. I still 
don't recommend doing this but I'll have to look at the code later to 
see if there is something else that can be done.



--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.