Re: XML Based Policy Configuration for SELinux

[Junji Kanemaru <linux@linuon.com>]

Hi guys,

I'm impressed xml based policy discussion here.
Is there XML based policy project home page that you are working on?
The idea, having policy in XML is similar to what we have been discussing
here in Japan.

What we are thinking is:

1) Policy maintainer creates policy source
2) Convert the source to XML and put them into XMLDB using tool
3) Users(regular admins I'd say) pickup and download policy fragments
    what exactly they need from XMLDB with XML query
4) Then convert the XML source to regular policy source and compile
    and apply.

Some people would think it is wasteful, why not having raw policy
source in DB. But I think XML makes things easier for adding, modifing
and deleting some part of policy.

IMO, currently it is very difficult to find dependencies in the policy source
but if we have it in XML it is easier.

-- Junji
Linuon Inc.
Tokyo Japan


--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.