From: Karl MacMillan [mailto:firstname.lastname@example.org]
> > I looked at fixing this by changing genfscon to use
> > instead of identifier (they are the same except user_identifier
> > includes "-"). This made checkpolicy generate a syntax
error for all
> > genfscon statements - haven't tracked down what the
problem is. The
> > grammer still seems to be unambiguous.
> Use "user_id" instead. Otherwise, you'll get a syntax
error when the
> token is classified as an IDENTIFIER (first match) and the grammar
> says that it must be a USER_IDENTIFIER.
Right as usual.
Maybe make user_id more generic as it is no longer only used for users..