Re: The sort algorithm is broken by the second rule, We need a way to pin these rules to the top.

> (Also, if we merge .local into the normal fc file then the .local
> can't override .homedirs)

We also don't have the capability of expanding templates in the .local file, so I doubt this will be an issue.
Btw the .homedirs file can easily be merged into the big file_contexts.

I don't have a strong opinion of whether we should be merging things together or not. It's just that this separation in .local .homedirs .something_else has to do with processing work, which seems to belong at policy build time, not at "runtime" where matchpathcon just wants to look up a context.

--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.