Re: suggestion to help transition to selinux: dynamic loading of libselinux

[Luke Kenneth Casson Leighton <lkcl@lkcl.net>]

On Tue, May 18, 2004 at 12:34:06PM -0400, Stephen Smalley wrote:
> On Sat, 2004-05-15 at 19:26, Luke Kenneth Casson Leighton wrote:
> > idea: make all the modifications to e.g. coreutils, login etc.
> > compile with the header files but not necessarily _need_
> > libselinux at run-time.
> 
> Interestingly, this issue just came up on the userlinux mailing list;
> someone noticed that upon doing an apt-get update, they pulled in
> libselinux1.  After a bit of investigation, they found that this was due
> to updating gdm, because the SELinux patch for gdm is already
> upstreamed.
 
  ah ha!  great!  so it's begun.
 
> Note of caution:  Some people still build /sbin/init statically, I
> think, and we don't want to prevent people from doing so just for
> SELinux.  The current patches allow for that; if we rewrite them to use
> dlopen, won't that be a problem?
 
 hm.

 yes.

 you'd need two packages with the same name - two compile-time
 #ifdef things - to solve that one.

 all in all, i'd say the pros and cons weigh against a rewrite.

 l.



--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.