Re: [SEPOL][SEMANAGE] Nodecon Support: Try 1

[Ivan Gyurdiev <ivg2@cornell.edu>]

> Attached is a resync of the same patch to current CVS.
Ok, this patch needs more work, I guess.

According to Chad Hanson (on IRC) the kernel reorders by netmask, which 
will not work with this patch.
If this is the case, then this problem is equivalent to the issue with 
ports - namely, the strategy to replace exact key match, and prepend 
everything else in front does not work, and creates problems. The code 
needs to be smarter on updates - needs to edit port ranges and nodecon 
entries that are overridden locally, and make the appropriate changes.

Other comments by Chad:
- no preference on byte order  - should probably follow policy 
convention (network byte order?)
- byte arrays are better than integer ones


--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.