Re: ANN: SELinux Reference Policy Release

[antoine <antoine@nagafix.co.uk>]

(...)
Good work!

> # Define derived domains for GPG from @userdomain
> # @param user The user domain to derive from
> # @param userrole The user role to authorize for GPG
> function gpg_per_userdomain(domain user, role userrole) {
>   derivedtype gpg_t from user
> 
>   domain_type(gpg_t)
>   domain_entry_file(gpg_t, gpg_exec_t)
>   role userrole types gpg_t
> 
>   ...
> 
> The key idea here is that an IDE could actually parse this,
Not just IDEs, my brain finds it easier to parse too.
XML if overused nowadays.

>  and easily
> determine programatically what types and roles are generated by the
> function, without doing hacks like expanding the M4 and parsing that,
> and then guessing.
Absolutely.

Antoine


--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.