SELinux Archive on
 help / color / Atom feed
From: Paul Moore <>
To: Stephen Smalley <>
Cc:, Ondrej Mosnacek <>
Subject: Re: [PATCH] scripts/selinux/mdp: fix initial SID handling
Date: Tue, 23 Jun 2020 20:52:39 -0400
Message-ID: <> (raw)
In-Reply-To: <>

On Wed, Jun 17, 2020 at 3:22 PM Stephen Smalley
<> wrote:
> commit e3e0b582c321 ("selinux: remove unused initial SIDs and improve
> handling") broke scripts/selinux/mdp since the unused initial SID names
> were removed and the corresponding generation of policy initial SID
> definitions by mdp was not updated accordingly.  Fix it.  With latest
> upstream checkpolicy it is no longer necessary to include the SID context
> definitions for the unused initial SIDs but retain them for compatibility
> with older checkpolicy.
> Fixes: e3e0b582c321 ("selinux: remove unused initial SIDs and improve handling")
> Signed-off-by: Stephen Smalley <>
> ---
>  scripts/selinux/mdp/mdp.c | 23 ++++++++++++++++++-----
>  1 file changed, 18 insertions(+), 5 deletions(-)

Merged into selinux/next, thanks Stephen.

paul moore

      reply index

Thread overview: 2+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2020-06-17 19:22 Stephen Smalley
2020-06-24  0:52 ` Paul Moore [this message]

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \ \ \ \ \ \

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link

SELinux Archive on

Archives are clonable:
	git clone --mirror selinux/git/0.git

	# If you have public-inbox 1.1+ installed, you may
	# initialize and index your mirror using the following commands:
	public-inbox-init -V2 selinux selinux/ \
	public-inbox-index selinux

Example config snippet for mirrors

Newsgroup available over NNTP:

AGPL code for this site: git clone