Re: [ libsepol 3/6] Users

[Joshua Brindle <jbrindle@tresys.com>]

Ivan Gyurdiev wrote:

>The following patch is intended to replace
>genusers.c (but not yet). It provides functions 
>to add, delete and load users into a policydb object.
>It uses a structure (sepol_uinfo_t) as the
>higher level representation for a user, and
>takes out the parsing.
>
>libsepol-2.1-users.diff
>
>Disclaimer 1:
>The role list must be NULL terminated. 
>
>  
>
The libsemanage api I'm writing right now has num_roles, IMO better than 
null termination in that it's easier to make mistakes with null termination

struct semanage_user {
        char *name;             /* Key */
        struct semanage_role **roles;
        int num_roles;
        struct semanage_mls *mls;
}

>Disclaimer 2:
>Not sure MLS processing is correct - please
>take a look.
>  
>
I've been talking to the TCS guys while here about the right thing to do 
with MLS so the libsemanage api should be correct.



--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.