Research Menu

.
Skip Search Box

SELinux Mailing List

Re: policy hierarchy patch

From: Joshua Brindle <jbrindle_at_tresys.com>
Date: Tue, 05 Apr 2005 10:03:02 -0400

> Sounds good to me. I should actually be able to take a look at it tomorrow and
> help you out with the code. I know that the parsing isn't the prettiest... I
> think I may be able to make it look better in C code. And we didn't really like
> the spaces anyway.
>

So what were you thinking? the hierarchy stuff already has the infrastructure for checking for '.' in the identifier and splitting out the "parent", which in your case would be the lower part of the range. Obviously these have hierarchy specific names and would be very confusing to on-lookers so maybe we could generalize those to avoid repeating code.

Then we just convert everything to identifier and anything that expects a category can check for '.' and set the values appropriately, this seems even cleaner than the way it's done now with the MLS_CAT_RANGE string..

I can probably bang this out pretty quickly unless you had something else you wanted to do with MLS or prefer to deal with that part yourself, let me know what you want to do. Also, will you be able to send a policy patch at the same time that rids the policy of those spaces?

Thanks, Joshua Brindle

--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.
Received on Tue 5 Apr 2005 - 10:04:27 EDT
 

Date Posted: Jan 15, 2009 | Last Modified: Jan 15, 2009 | Last Reviewed: Jan 15, 2009

 
bottom

National Security Agency / Central Security Service