Re: object class discovery userland

["Christopher J. PeBenito" <cpebenito@tresys.com>]

On Fri, 2007-04-20 at 13:02 -0400, Eamon Walsh wrote:
> Eamon Walsh wrote:
> > Christopher J. PeBenito wrote:
> >> 3. stop exporting class and perm indexes outside of the libraries.  Then
> >> the reverse lookup wouldn't be needed.  This would involve some
> >> overhauling of the libraries.
> > 
> > I don't think this is a good idea because of the disruption it would 
> > cause with access vector processing (as passed to security_av_string() 
> > and avc_has_perm()).  How do you or together strings?
> > 
> > Why not just cache the numbers in the library, as Karl suggested, or 
> > create a parallel "class_num" or "class_index" directory with numeric 
> > nodes (perhaps renaming class to class_name).
> > 
> class_num/1/perms/1
> class_num/1/name

I don't feel strongly about any of my suggestions, I mainly wanted to
get the discussion going.  The inspiration for symlink idea was from all
the symlinking you see in sysfs, but the above structure certainly is an
option too.

-- 
Chris PeBenito
Tresys Technology, LLC
(410) 290-1411 x150


--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.