Re: [ libsepol 0/6] Context reorganization

[Joshua Brindle <jbrindle@tresys.com>]

Ivan Gyurdiev wrote:

>>it also doesn't call context_isvalid() which means it doesn't need the 
>>cache.
>>    
>>
>
>I think any functions exposed by libsepol (intended for external use,
>whether it's static linking, or shared linking), which manipulate 
>the policydb should leave it  in a valid state after 
>they're done. This is especially true if we move to a model 
>where all changes occur on the in-memory policydb, 
>instead of being written to disk (the new functions which I'm adding).
>
>Basically, I want libsepol operations on the policydb to
>be transactional in themselves, and you're saying that currently
>sepol_genusers_policydb is broken, and so are the new user functions
>that I submitted.
>  
>
you have to index the policy if you want to validate contexts, it's a 
necessity that won't go away.

--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.