Ivan Gyurdiev wrote:
>
>>
>> what info? it isn't hard to reproduce.
> Contents of: users.local, seusers, and seusers.final
# cat /etc/selinux/test-nomcs/modules/active/seusers.final root:root:
__default__:user_u:

no seusers file
no users.local

> I guess this function is exactly the place that should reject a seuser
> with mls fields (or ignore them) based on whether mls is enabled in
> the policy - I can export the mls flag from libsepol, and check that
> (at this point we have a policydb, validation occurs after everything
> is merged).

--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.