RE: I would like to propose that we add compression to handleallpolicy files on disk.

[Karl MacMillan <kmacmillan@mentalrootkit.com>]

On Thu, 2006-11-09 at 13:50 -0500, Joshua Brindle wrote:
> > From: Karl MacMillan [mailto:kmacmillan@mentalrootkit.com] 
> > 
> > On Thu, 2006-11-09 at 12:00 -0500, Joshua Brindle wrote:
> > > > From: Stephen Smalley [mailto:sds@tycho.nsa.gov]
> > > > 
> > > > On Thu, 2006-11-09 at 10:13 -0500, Stephen Smalley wrote:
> > > > > On Thu, 2006-11-09 at 09:34 -0500, Joshua Brindle wrote:
> > > 
> > > Karl suggested that we can compress the policy packages but not the 
> > > kernel policy. As long as this isn't a policy package format change 
> > > (eg., the policy packages in /usr/share/selinux are the 
> > same they've 
> > > always been) and it is only libsemanage manipulating the 
> > files in the 
> > > store I'm fine with that. The module store is a private resource of 
> > > libsemanage so nothing else should be affected in any way by this.
> > > 
> > 
> > Making semodule recognize bzipped files should be pretty 
> > simple as well
> > - why wouldn't we do that to save space in /usr/share/selinux?
> > 
> 
> What about everything else that will read modules (including setools in
> the future)?

It's a small amount of logic to detect.

>  They need to be stored in their native format and I don't
> think that libsepol should link against a compression library to make
> that happen.

What's wrong with letting libsepol dlopen libbz2.so?

Karl


--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.