Re: [RFC] Source Policy, CIL, and High Level Languages

["Christopher J. PeBenito" <cpebenito@tresys.com>]

On 7/17/2014 4:37 PM, Stephen Smalley wrote:
> On 07/17/2014 04:04 PM, Steve Lawrence wrote:
>> On 07/17/2014 03:48 PM, Stephen Smalley wrote:
>>> On 07/17/2014 03:10 PM, Stephen Smalley wrote:

>> Yep, we store both HLL and CIL. They are both compressed and CIL
>> compresses decently since it's just text, but it's still a lot of text.
>>
>>> Is there an option to discard the .pp files altogether and only retain
>>> the cil files?
>>
>> Not at the moment, but it wouldn't be hard to accomplish. Just need to
>> delete all the hll files and change the contents of lang_ext to 'cil'.
>> Something we could add if storage is an issue.
[...]
> Not sure what benefit there is in retaining the pp files, since they
> carry no additional information AFAIK and they aren't human viewable or
> editable.  Is there even an option for exporting modules from the policy
> store currently that would allow extracting them except via direct file
> access to the policy store?

If we eventually have an upstream policy query library, then it could be
useful to export modules from the store for analysis tools.  Then you
could analyze the policy.29 but potentially have backtracing to the HLL
policy file and ideally source line where possible (obviously not for .pp).

-- 
Chris PeBenito
Tresys Technology, LLC
www.tresys.com | oss.tresys.com