ANN: SETools Release

ANN: SETools Release

[Christopher J. PeBenito]

A new release of SETools is now available on the Tresys OSS site, from
http://oss.tresys.com.  The primary change in this release is the
addition of support for loading sets of policy modules in all of the
tools.  This enables analysis of the policy with nearly all of the
information available from the original source policy, such as original
attribute names.  The complete change log for this release follows.

SETools 3.1:

SETools:

  * All tools that open a policy now support loadable policy modules.
    Command line tools expect the first module to be a base module
    followed optionally by any other modules.  Graphical tools have
    a new open policy dialog to select a base module and any number of
    additional modules.

  * Release of RPM packages that are compatible with Fedora Core 5 and
    6.  The spec and support files are in packages/rpm.

libapol:

  * New class apol_policy_path_t to represent a base policy and any
    number of modules.  Use this whenever referring to the file or
    files constituting a policy.
  
libqpol:

  * Policy features such as attribute names or MLS can now be queried
    individally via qpol_policy_has_capability() rather than inferred
    by policy type and version.

  * New class qpol_module_t to represent a particular policy module
    prior to it being linked into a base policy (qpol_policy_t).

libseaudit:

  * Rewrite of library to have proper namespaces.  libseaudit is now
    fully documented and suitable for third-party users.

seaudit:

  * Rewrite to use new libseaudit.

  * Numerous tweaks to the interface to be more user friendly.

seaudit-report:

  * Rewrite to use new libseaudit.

sediffx:

  * Numerous tweaks to the interface to be more user friendly.

-- 
Chris PeBenito
Tresys Technology, LLC
(410) 290-1411 x150


--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.

Re: ANN: SETools Release

[Karl MacMillan]

Christopher J. PeBenito wrote:
> 
> libseaudit:
> 
>   * Rewrite of library to have proper namespaces.  libseaudit is now
>     fully documented and suitable for third-party users.
> 

Do you now handle USER_AVC and AVC_PATH audit messages? Also, any 
thoughts of using the new audit parsing library in the future?

Karl



--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.

Re: ANN: SETools Release

[Christopher J. PeBenito]

On Thu, 2007-02-08 at 15:32 -0500, Karl MacMillan wrote:
> Christopher J. PeBenito wrote:
> > 
> > libseaudit:
> > 
> >   * Rewrite of library to have proper namespaces.  libseaudit is now
> >     fully documented and suitable for third-party users.
> > 
> 
> Do you now handle USER_AVC and AVC_PATH audit messages? Also, any 
> thoughts of using the new audit parsing library in the future?

No, we don't handle those messages yet, as we didn't change the parsing.
We will be working on adding support for the various audit log message
types via libaudit for the next release.

-- 
Chris PeBenito
Tresys Technology, LLC
(410) 290-1411 x150


--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.