MLS translations for libsemanage and libsepol

[Ivan Gyurdiev <ivg2@cornell.edu>]

>
>
> seusers is a little unclear; it presently has to use the raw definitions
> because it is only a partial context (just the range), so it isn't going
> through conversion.  GUI for seusers modification would likely apply
> translation itself for presentation to admins.
>   

What's the justification for doing translations in libselinux (the 
library), while placing that responsibility on the caller for 
libsemanage, and sepol. Maybe we should be doing translations for:

- policydb_context_isvalid
- any new functions added to libsepol to check validity and dominance of 
mls ranges (for seusers)
- se[pol/manage]_context_from_string
- se[pol/manage]_context_to_string
- se[pol/manage]_context_get_mls
- se[pol/manage]_context_set_mls
- se[pol/manage]_user_get_mlslevel (?? - are categories supposed to be 
rejected here)
- se[pol/manage]_user_set_mlslevel (?? - are they actually rejected, or 
just ignored..hmm)
- se[pol/manage]_user_get_mlsrange
- se[pol/manage]_user_set_mlsrange
- se[pol/manage]_seuser_get_mlsrange
- se[pol/manage]_seuser_set_mlsrange


--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.