From: James Carter <jwcart2@tycho.nsa.gov>
To: SELinux List <selinux@tycho.nsa.gov>
Subject: [PATCH 0/3] libsepol, policycoreutils, and checkpolicy: Add support for generating CIL to libsepol and checkpolicy
Date: Fri, 27 Mar 2015 11:18:39 -0400 [thread overview]
Message-ID: <551574CF.5020201@tycho.nsa.gov> (raw)
This patch set moves the code to generate CIL from pp.c in
policycoreutils/hll/pp to libsepol, adds a new function to generate CIL from a
module policydb, and modifies checkpolicy and checkmodule to support generating
CIL as their output.
The primary motivation of this work is to allow SE for Android to use the CIl
compiler. Converting the policy.conf to CIL and then compiling to the kernel
binary policy results in a policy that is about 20% smaller. The smaller size is
because type expressions with negations are converted to type attribute sets in
CIL instead of being expanded.
--
James Carter <jwcart2@tycho.nsa.gov>
National Security Agency
reply other threads:[~2015-03-27 15:16 UTC|newest]
Thread overview: [no followups] expand[flat|nested] mbox.gz Atom feed
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=551574CF.5020201@tycho.nsa.gov \
--to=jwcart2@tycho.nsa.gov \
--cc=selinux@tycho.nsa.gov \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.