Re: Updated SELinux Release

[Colin Walters <walters@verbum.org>]

On Wed, 2004-11-03 at 18:59 -0600, Manoj Srivastava wrote:
> On Wed, 03 Nov 2004 10:39:40 -0500, Stephen Smalley <sds@epoch.ncsc.mil> said: 
> 
> > An updated SELinux release is available from the NSA SELinux web
> > site; see http://www.nsa.gov/selinux/news.cfm#R041102.  
> 
> 	I have been looking at the changes in libsepol, and I see
>  these changes to the API:
> ======================================================================
> -int mls_sid_to_context(context_struct_t * context,
> +int mls_sid_to_context(policydb_t *policydb,
> +                      context_struct_t * context,

[...]

> 	Unfortunately, this has not been accompanied with an soname
>  change, this can't be a good thing.  I would suggest bumping up the
>  soname to match the version (libsepol.so.1.2), to minimize confusion.

I don't think anyone has actually been using these functions up until
now.  Neither Debian or Fedora enabled MLS, and I don't think Gentoo did
either.  So it's probably safe to continue using the existing soname;
but we should certainly be careful about this in the future.





--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.