From mboxrd@z Thu Jan  1 00:00:00 1970
Message-ID: <4338A1BD.9050204@cornell.edu>
Date: Mon, 26 Sep 2005 21:34:53 -0400
From: Ivan Gyurdiev <ivg2@cornell.edu>
MIME-Version: 1.0
To: Stephen Smalley <sds@tycho.nsa.gov>
CC: selinux@tycho.nsa.gov, dwalsh@redhat.com
Subject: Re: [ SEPOL ] Extract user records from binary policy
References: <4334E273.9070703@cornell.edu>  <4334E4C8.8050206@cornell.edu> <1127762342.19016.186.camel@moss-spartans.epoch.ncsc.mil>
In-Reply-To: <1127762342.19016.186.camel@moss-spartans.epoch.ncsc.mil>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Sender: owner-selinux@tycho.nsa.gov
List-Id: selinux@tycho.nsa.gov


>I understand that you are trying to just re-use the existing mls_
>functions here, but I think it would be better to alter them or add new
>ones that provide a saner interface for this kind of manipulation.  In
>particular, the manipulation of str above makes me nervous, even if it
>is technically correct.
>  
>
Yes, I agree the mls interface should be improved... so I don't have to 
write things like:

                if (mls_context_to_sid(policydb, '$', &mls_level, 
&context)) {
                        DEBUG(__FUNCTION__, "invalid level %s for user 
%s\n",
                                mls_level, name);
                        goto err;
                }

Is this patch vetoed for now?

--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.