Re: [Xen-devel] [PATCH] flask: Add check for io{port, mem}con sorting

["Jan Beulich" <JBeulich@xxxxxxxx>]

>>> On 28.09.18 at 21:13, <dgdegra@xxxxxxxxxxxxx> wrote:
> These entries are not always sorted by checkpolicy.  Enforce the sorting
> (which can be done manually if using an unpatched checkpolicy) when
> loading the policy so that later uses by the security server do not
> incorrectly use the initial sid.

"Enforce the sorting" could mean two things - sorting what's unsorted,
or (as you do) raise an error. Isn't raising an error here possibly going
to impact systems which currently work?

Jan



_______________________________________________
Xen-devel mailing list
Xen-devel@xxxxxxxxxxxxxxxxxxxx
https://lists.xenproject.org/mailman/listinfo/xen-devel