Hi, thanks for working on this so quickly. I tested this patch, but it seems that the following pattern I wrote in https://lore.kernel.org/selinux/CAH9xa6eFO6BNeGko90bsq8CuDba9eO+qdDoF+7zfyAUHEDpH9g@xxxxxxxxxxxxxx/ is still not incompatible with older versions. > the first rule is applied to /foo/bar. This is because now the node for `foo` > is processed first. > > > /foo/b.* u:object_r:b_something_file:s0 > > /(foo|baz)/bar u:object_r:bar_file:s0
