On 2/22/21 7:27 PM, Petr Lautrbach wrote:
> bauen1 <j2468h@xxxxxxxxxxxxxx> writes:
>
>> Currently, chcat will crash when run as regular user, because import
>> sepolicy throws an Exception when failing to access the binary policy
>> under /etc/selinux/${POLICYNAME}/policy/ which is inaccessible to
>> regular users.
>>
>
> I'd rather follow Nicolas suggestion so I've prepared a patch, see
> below, which moves the policy initialization in sepolicy module before
> it's used for the first time. It seems to solve the same problem in more
> generic way. I need to run some tests on that and then they pass I'll
> propose it here on the mailing list.
>
Yes, this is a much better approach.
--
bauen1
https://dn42.bauen1.xyz/
