RE: file contexts and modularity

[Ivan Gyurdiev <ivg2@cornell.edu>]

On Fri, 2005-06-24 at 08:08 -0400, Stephen Smalley wrote:
> On Thu, 2005-06-23 at 16:28 -0400, Ivan Gyurdiev wrote:
> >Karl MacMillan wrote:
> > > Not certain, therefore, that libsepol is the correct place for the
> > > client api (e.g. the one used by useradd). Thoughts?
> > 
> > It's difficult to me to write forward portable code, when I don't
> > know the future :)
> 
> True.  But we can at least seek to provide an interface to useradd from
> libsepol that doesn't expose the fact that we are necessarily dealing
> with a binary policy file/image, just an abstract policy object that may
> be backed by a binary policy or may be backed by the policy daemon.

The current interface keeps the policydb_t as an opaque data structure..
On the other hand it also passes in a sel_root parameter (for
selinux_policy_root(), which I'm not so sure about).




--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.