Re: libsemage patch to not compile modules for seusers and fcontext

[Ivan Gyurdiev <ivg231@gmail.com>]

>> I'm a little unclear on what this is doing - can you clarify?
>>     
> This is clearing the existing seusers.final file, otherwise delete was
> not working.
>   
I think the previous code was doing more - it was merging the local file 
with the shipped base package file, like this:

    data = extract_file_from_policy_package( )
    write_file ( "seusers.final", data )
    if ( data != null ) {
        seusers.clear_cache()  // thereby forcing reload from 
seusers.final when cache() is called again (in merge_components)
    } else {
        seusers.clear()
    }

It's also doing this three times (once for fcontexts, once for seusers, 
once for seusers_extra).
The problem is that you're skipping the link_sandbox call, which builds 
the base package, containing this information.

Ivan



--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.