Re: [PATCH v3 2/2] libselinux: support multiple context files for the file backend
Stephen Smalley <[email protected]> Mon, 27 Jul 2026 16:16:42 -0400
| Newsgroups | org.kernel.vger.selinux |
|---|---|
| Message-ID | <CAEjxPJ59uCpyzqv6mAt2C75DBnhQxnYiAUg_U65dRFrvJJtmvQ@mail.gmail.com> |
On Mon, Jul 27, 2026 at 9:30 AM Stephen Smalley <[email protected]> wrote: > > On Sun, Jul 26, 2026 at 9:39 PM Thiébaud Weksteen <[email protected]> wrote: > > > > Update the file labeling backend to support specifying multiple > > SELABEL_OPT_PATH options in selabel_open(). > > > > All provided paths are stored in rec->spec_files and processed during > > initialization. Derived files, such as substitutions (.subs, .subs_dist) > > and auxiliary contexts (.homedirs, .local), continue to be based on the > > first path (or default selinux_file_context_path()) when enabled. > > > > Duplicate checking is only performed within each context file. The current > > behavior expects the ability for a later file to overwrite a previous > > declaration (e.g., .local). > > > > Signed-off-by: Thiébaud Weksteen <[email protected]> > > Acked-by: Stephen Smalley <[email protected]> This series is merged.