On Wed, Nov 16, 2016 at 5:54 AM, Stephen Smalley <sds@xxxxxxxxxxxxx> wrote: > On 11/15/2016 07:42 PM, william.c.roberts@xxxxxxxxx wrote: >> From: William Roberts <william.c.roberts@xxxxxxxxx> >> >> The combining logic for dontaudit rules was wrong, causing >> a dontaudit A B:C *; rule to be clobbered by a dontaudit A B:C p; >> rule. >> >> This is a reimplementation of: >> commit 6201bb5e258e2b5bcc04d502d6fbc05c69d21d71 ("libsepol: >> fix checkpolicy dontaudit compiler bug") >> that avoids the cumbersome pointer assignments on alloced. > > Thanks, applied both patches (revert and reimplementation). These line numbers might not line up, but it was inconsistent, so I didn't know: 1702: typemap ? typemap[cur->data - 1] : cur->data; 2958: to_be_appended = (cur_state == 1) ? <snip> _______________________________________________ Selinux mailing list Selinux@xxxxxxxxxxxxx To unsubscribe, send email to Selinux-leave@xxxxxxxxxxxxx. To get help, send an email containing "help" to Selinux-request@xxxxxxxxxxxxx.