>>> On 28.09.18 at 21:13, <dgde...@tycho.nsa.gov> wrote: > These entries are not always sorted by checkpolicy. Enforce the sorting > (which can be done manually if using an unpatched checkpolicy) when > loading the policy so that later uses by the security server do not > incorrectly use the initial sid.
"Enforce the sorting" could mean two things - sorting what's unsorted, or (as you do) raise an error. Isn't raising an error here possibly going to impact systems which currently work? Jan _______________________________________________ Xen-devel mailing list Xen-devel@lists.xenproject.org https://lists.xenproject.org/mailman/listinfo/xen-devel
