2011-08-05 02:29:39

by Eric Paris

[permalink] [raw]
Subject: [refpolicy] checkpolicy is broken (which is not)

On 08/04/2011 09:15 PM, Harry Ciao wrote:
> Hi Chris,
>
> I think Dan's case below is a good example, that while
> libsepol/checkpolicy/etc upgraded to 2011-07-27 release, people may have
> not upgraded(or don't want/need to for the time being) the refpolicy to
> the 2011-07-26 release accordingly, then people would run into this problem.
>
> I am wondering if there is a need to add one note in selinux project
> wiki page that once upgraded to 2011-07-27 release, at least the
> 3cbc9727 commit should be cherry-picked to refpolicy, if people still
> prefer to older releases.

I don't think we can/should do this. New userspace should be able to
handle old policy. You understand this code better than anyone, can you
find a solution such that old modules will still compile and work?

-Eric