On Wed, Jun 17, 2020 at 3:22 PM Stephen Smalley <stephen.smalley.work@xxxxxxxxx> wrote: > > commit e3e0b582c321 ("selinux: remove unused initial SIDs and improve > handling") broke scripts/selinux/mdp since the unused initial SID names > were removed and the corresponding generation of policy initial SID > definitions by mdp was not updated accordingly. Fix it. With latest > upstream checkpolicy it is no longer necessary to include the SID context > definitions for the unused initial SIDs but retain them for compatibility > with older checkpolicy. > > Fixes: e3e0b582c321 ("selinux: remove unused initial SIDs and improve handling") > Signed-off-by: Stephen Smalley <stephen.smalley.work@xxxxxxxxx> > --- > scripts/selinux/mdp/mdp.c | 23 ++++++++++++++++++----- > 1 file changed, 18 insertions(+), 5 deletions(-) Merged into selinux/next, thanks Stephen. -- paul moore www.paul-moore.com