* system without libsepol
@ 2012-09-13 20:45 Eric Paris
2012-09-14 12:41 ` Stephen Smalley
0 siblings, 1 reply; 2+ messages in thread
From: Eric Paris @ 2012-09-13 20:45 UTC (permalink / raw)
To: selinux
Is it reasonable to expect a system without libsepol to be able to load
policy? I know the code can do it right now, but does anyone do it?
I'd like to remove and try to rework some of that code so it is cleaner
and more obvious. Anyone see a problem with requiring libspol be
installed if libselinux was build with shared library expectations?
-Eric
--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.
^ permalink raw reply [flat|nested] 2+ messages in thread
* Re: system without libsepol
2012-09-13 20:45 system without libsepol Eric Paris
@ 2012-09-14 12:41 ` Stephen Smalley
0 siblings, 0 replies; 2+ messages in thread
From: Stephen Smalley @ 2012-09-14 12:41 UTC (permalink / raw)
To: Eric Paris; +Cc: selinux
On Thu, 2012-09-13 at 16:45 -0400, Eric Paris wrote:
> Is it reasonable to expect a system without libsepol to be able to load
> policy? I know the code can do it right now, but does anyone do it?
> I'd like to remove and try to rework some of that code so it is cleaner
> and more obvious. Anyone see a problem with requiring libspol be
> installed if libselinux was build with shared library expectations?
SE Android doesn't have libsepol on the device at all (primarily because
of licensing). We only build it for the build host and use it to
compile the policy for the device. However, we also have our own custom
policy loading logic for SE Android due to other differences, so it
likely doesn't matter what you do to the upstream libselinux logic.
--
Stephen Smalley
National Security Agency
--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.
^ permalink raw reply [flat|nested] 2+ messages in thread
end of thread, other threads:[~2012-09-14 12:41 UTC | newest]
Thread overview: 2+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2012-09-13 20:45 system without libsepol Eric Paris
2012-09-14 12:41 ` Stephen Smalley
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.