Re: [Xen-devel] [PATCH] libsepol: Fix building Xen policy with devicetreecon

2015-03-23 Thread Steve Lawrence
On 03/23/2015 11:58 AM, Richard Haines wrote: > Problems fixed: > 1) Fix core dump when building CIL policy (corrupted double-linked list) > by Steve Lawrence > 2) Binary policy failed to read with devicetreecon statement. > 3) Free path name - With a Xen policy running

Re: [Xen-devel] [PATCH v3 0/3] Xen/FLASK policy updates for device contexts

2015-03-23 Thread Steve Lawrence
I think there may be a typo in the documentation update. It says: Policy version 30 introduced the context Should "context" be "devicetreecon"? Otherwise, this patch looks good to me. As far as issue 2, I think I've tracked it down to an errant free() in cil_destroy_devicetreecon. CIL uses stri