Re: [ SEMANAGE ] [ SEPOL ] More database work

[Joshua Brindle <jbrindle@tresys.com>]

Ivan Gyurdiev wrote:
> 
>> Ok, I've made a first cut at the changes to libsepol and updated it and
>> checkpolicy to build again, and am starting to work through libsemanage.
>> As an example of what to expect, the diff below to database_direct.[ch]
>> was needed to get it to compile again.
>>   
> 
> Ok...
> 
> On second thought that code was likely wrong to begin with, since Tresys 
> put their modules in a special package container, and mark everything 
> with a special magic, and use special functions to read everything.... 
> I'll get it fixed later... not testing the direct case yet.

It isn't just a special package container. The actual policy format for 
modules is different because it retains more information than the binary 
format. The 'package' format is the module with the file contexts 
prepended to it. The module format and the file contexts are needed to 
properly link and expand a policy.

Joshua

--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.