Re: I think this is equivalent to what we have now and more efficient.

[Steve Grubb <sgrubb@redhat.com>]

On Monday 26 February 2007 10:01, Stephen Smalley wrote:
> > I had a patch for it back in early 2005, called it "loadpolicyvers".
> > But I was only using it for testing, and we didn't have a real user for
> > it at the time.  It would have to be re-based.
>
> Note btw that even if we add this node and add logic to libselinux to
> start using it as an alternative to the getcon() test, we'd still need
> to retain the getcon() test as a fallback for compatibility with older
> kernels.

True.

> So we aren't simplifying the libselinux logic. 

Not now, but we are setting things up to simplify the logic at some future 
point. But more importantly, we finally have a way to see what is really 
loaded. sestatus could be rewritten to use this new node if its available so 
that its more accurate about what's loaded.

-Steve


--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.