I was thinking is could work like this:
seapp_contexts would have an additional option, sebool, you could set this to the name of the seboolean, such as CTS.
When the code that parses the seapp_contexts file (selinux_android_setcontext) could check the sebool flag first, and if it matches, apply the existing rules to it, else, throw it away as a possible match.
Would anyone find this useful, and if so I can code it up tomorrow after I submit the Settings app patches to Garrett.
--
Respectfully,
William C Roberts
Respectfully,
William C Roberts