Re: The sort algorithm is broken by the second rule, We need a way to pin these rules to the top.

[Ivan Gyurdiev <ivg2@cornell.edu>]

Ivan Gyurdiev wrote:
>
>> Hmm, I think we actually don't have this capability as of right now - 
>> my fault, as I didn't get around to addressing this issue, which 
>> would consist of either not merging the .local file into the other 
>> one (as we do now), or moving the sort algorithm into libsemanage, 
>> where it would sort the local things separately from the module things. 
> ...maybe this will help.
>
I assume this patch won't be used...but in case anyone decides to merge 
it, it's buggy - it needs to treat lack of file_contexts.local in the 
sandbox as non-fatal and fallthrough on install, just like it was done 
for the seusers file - simple 1-line change.


--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.