Re: Updated SELinux Release

["Christopher J. PeBenito" <cpebenito@tresys.com>]

On Thu, 2004-11-04 at 08:38 -0500, Stephen Smalley wrote:
> On Wed, 2004-11-03 at 22:37, Colin Walters wrote:
> > I don't think anyone has actually been using these functions up until
> > now.  Neither Debian or Fedora enabled MLS, and I don't think Gentoo did
> > either.  So it's probably safe to continue using the existing soname;
> > but we should certainly be careful about this in the future.
> 
> As a reminder, when I created libsepol from the checkpolicy core logic,
> I had to export just about everything for use by checkpolicy via the
> static library, but narrowly limited the API exported by the shared
> library.  So we are free to rework the static library API at will, as
> long as it doesn't affect the shared library API/ABI.

Well in this case, I believe these changes were because of the MLS
compile failures I had.  When the code was originally moved over to
libsepol from checkpolicy, the MLS functions weren't switched over from
the global policydb to the policydb pointer in the function call.  So
really, this fixes the broken API.

-- 
Chris PeBenito
Tresys Technology, LLC
(410) 290-1411 x150



--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.