mirror of
https://github.com/topjohnwu/selinux.git
synced 2025-02-04 02:06:41 +00:00
7a137eb75f
Commit 77779d2ca, which added support for userattributes in CIL, accidentally removed code that ignored object_r when adding userrole mappings to the policydb. This meant that running commands like `semanage user -l` would incorrectly show object_r. This patch adds that code back in. Note that CIL requires that these mappings exist to properly validate file contexts, so pp2cil's behavior of creating these mappings is not modified. Signed-off-by: Steve Lawrence <slawrence@tresys.com>