On Fri, Apr 25, 2014 at 6:26 PM, Will Woods <wwoods@redhat.com> wrote:<br>
<blockquote type="cite"><div class="plaintext" style="white-space: pre-wrap;">
But if SELinux was already initialized, selinux_setup() skips loading
policy and returns 0. So if you load policy normally, and then you
switch-root to a new root that has new policy, selinux_setup() never
loads the new policy. What gives?</div></blockquote><div><br></div><div>I think your analysis is correct, and the patch looks good to me.</div><div><br></div>