From mboxrd@z Thu Jan 1 00:00:00 1970 Message-ID: <4516A144.3050701@tresys.com> Date: Sun, 24 Sep 2006 11:16:20 -0400 From: Joshua Brindle MIME-Version: 1.0 To: Joshua Brindle CC: Darrel Goeddel , SELinux List , Serge Hallyn , "Christopher J. PeBenito" , Stephen Smalley , Karl MacMillan Subject: Re: [RFC PATCH] allow range_transitions and MLS users in modules References: <6FE441CD9F0C0C479F2D88F959B01588443A3E@exchange.columbia.tresys.com> In-Reply-To: <6FE441CD9F0C0C479F2D88F959B01588443A3E@exchange.columbia.tresys.com> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Sender: owner-selinux@tycho.nsa.gov List-Id: selinux@tycho.nsa.gov Joshua Brindle wrote: >> From: Darrel Goeddel [mailto:dgoeddel@trustedcs.com] >> >> - Add the ability to require MLS sensitivities and categories >> in policy >> modules. >> - Remove the restrictions on defining users in MLS-enabled modules. >> - Handle range_trans_rules in modules. >> >> This all allows range_transition statements to be used in >> policy modules and allows definition of users in MLS policy modules. >> >> I haven't tested this as much as I would like, but it is >> working nicely for me. I have built several policies (MLS, >> non-MLS, strict, targeted, >> etc.) and have built several modules exercising the new functionality. >> I'd appreciate any feedback you may have at this point. >> > > Aside from the 2 initializers I mentioned earlier this looks good, can > you add those initializers and resend please? > and when you have a chance it would be really good if we had unit tests for the linker and expander parts of this. -- This message was distributed to subscribers of the selinux mailing list. If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with the words "unsubscribe selinux" without quotes as the message.