Re: [PATCH 2/2] checkpolicy/tests: Modify tests to check handling of initial sids

Stephen Smalley <[email protected]> Fri, 7 Nov 2025 11:04:35 -0500
Newsgroups org.kernel.vger.selinux-refpolicy,org.kernel.vger.selinux
Message-ID <CAEjxPJ5qFr8iGs=sjoYfb92dFuxjffcsvArASr3f6syc-PcMeA@mail.gmail.com>
On Wed, Nov 5, 2025 at 2:00=E2=80=AFPM Stephen Smalley
<[email protected]> wrote:
>
> On Tue, Nov 4, 2025 at 3:52=E2=80=AFPM James Carter <[email protected]> w=
rote:
> >
> > For policy_allonce.conf and policy_allonce_xen.conf declare the
> > first three initial sids, but only assign a context to the first
> > and third. This will cause the second initial sid to be dropped
> > from the binary policy and cause the handling of a gap in the
> > initial sids to be tested.
> >
> > Update the expected and expected_opt policies to reflect the new
> > expected resulting policies.
> >
> > Signed-off-by: James Carter <[email protected]>
>
> Acked-by: Stephen Smalley <[email protected]>
> Tested-by: Stephen Smalley <[email protected]>

Thanks, both patches now applied.