Re: [PATCH v3 2/2] libselinux: support multiple context files for the file backend

Stephen Smalley <[email protected]> Mon, 27 Jul 2026 16:16:42 -0400
Newsgroups org.kernel.vger.selinux
Message-ID <CAEjxPJ59uCpyzqv6mAt2C75DBnhQxnYiAUg_U65dRFrvJJtmvQ@mail.gmail.com>
On Mon, Jul 27, 2026 at 9:30 AM Stephen Smalley
<[email protected]> wrote:
>
> On Sun, Jul 26, 2026 at 9:39 PM Thiébaud Weksteen <[email protected]> wrote:
> >
> > Update the file labeling backend to support specifying multiple
> > SELABEL_OPT_PATH options in selabel_open().
> >
> > All provided paths are stored in rec->spec_files and processed during
> > initialization. Derived files, such as substitutions (.subs, .subs_dist)
> > and auxiliary contexts (.homedirs, .local), continue to be based on the
> > first path (or default selinux_file_context_path()) when enabled.
> >
> > Duplicate checking is only performed within each context file. The current
> > behavior expects the ability for a later file to overwrite a previous
> > declaration (e.g., .local).
> >
> > Signed-off-by: Thiébaud Weksteen <[email protected]>
>
> Acked-by: Stephen Smalley <[email protected]>

This series is merged.