Re: [ libsepol 2/6] Ports

[Joshua Brindle <jbrindle@tresys.com>]

Ivan Gyurdiev wrote:

>>I don't think thats such a great idea. Really alot of the meat of the 
>>define_* functions has already moved to declare_symbol. The stuff that 
>>is remaining is really parser specific such as handling where things can 
>>be declared, handling multiple declarations, etc. It serves no purpose 
>>to generalize this code as it really is about how to parse the policy 
>>and not how to build up these structures.
>>    
>>
>
>How can I add te_avtab rules to policy at the moment, without
>using checkpolicy?
>  
>
All the te_avtab code has been removed from checkpolicy for the modules. 
In fact, aside from checking type transition conflicts, checkpolicy 
doesn't add any rules at all to the avtab, this is done at expand time.

further, avtab_insert, avtab_search, etc have always been in libsepol, 
in avtab.c

--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.