Re: [PATCH v3 2/2] libselinux: support multiple context files for the file backend

Thiébaud Weksteen <[email protected]> Tue, 28 Jul 2026 11:24:04 +1000
Newsgroups org.kernel.vger.selinux
Message-ID <CA+zpnLcGR5WNW8goyTj8-Fveha7ES_8F+zoc0uruuMWJvzmP8A@mail.gmail.com>
On Tue, Jul 28, 2026 at 6:16 AM Stephen Smalley
<[email protected]> wrote:
>
> On Mon, Jul 27, 2026 at 9:30 AM Stephen Smalley
> <[email protected]> wrote:
> >
> > On Sun, Jul 26, 2026 at 9:39 PM Thiébaud Weksteen <[email protected]> wrote:
> > >
> > > Update the file labeling backend to support specifying multiple
> > > SELABEL_OPT_PATH options in selabel_open().
> > >
> > > All provided paths are stored in rec->spec_files and processed during
> > > initialization. Derived files, such as substitutions (.subs, .subs_dist)
> > > and auxiliary contexts (.homedirs, .local), continue to be based on the
> > > first path (or default selinux_file_context_path()) when enabled.
> > >
> > > Duplicate checking is only performed within each context file. The current
> > > behavior expects the ability for a later file to overwrite a previous
> > > declaration (e.g., .local).
> > >
> > > Signed-off-by: Thiébaud Weksteen <[email protected]>
> >
> > Acked-by: Stephen Smalley <[email protected]>
>
> This series is merged.

Thanks for the reviews Stephen.