Re: [ SEPOL ] Extract user records from binary policy

[Ivan Gyurdiev <ivg2@cornell.edu>]

>I understand that you are trying to just re-use the existing mls_
>functions here, but I think it would be better to alter them or add new
>ones that provide a saner interface for this kind of manipulation.  In
>particular, the manipulation of str above makes me nervous, even if it
>is technically correct.
>  
>
Yes, I agree the mls interface should be improved... so I don't have to 
write things like:

                if (mls_context_to_sid(policydb, '$', &mls_level, 
&context)) {
                        DEBUG(__FUNCTION__, "invalid level %s for user 
%s\n",
                                mls_level, name);
                        goto err;
                }

Is this patch vetoed for now?

--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.