On 08/29/2010 02:55 PM, Mr Dash Four wrote: > >> As for looking stuff up, i use eclipse-slide. Basically i have refpolicy >> imported into slide and build in slide that will expose the macros so >> you can just hover over them and see their contents or alter click and >> choose open declaration or just click them and look in the declaration >> pane. Theres also a filter window which lets you easily search for >> interfaces. >> > Bummer! I use Eclipse extensively in my everyday job (as well as at > home) and that is the first time I've read about eclipse-slide! > > Google reveals this - http://oss.tresys.com/projects/slide/wiki/download > - and from this it seems a pretty handy tool to have. Does it resolve > macros with $1 and/or $2 in their names (like corenet_bind_dns_port -> > corenet_bind_$1_port for example)? Not like that ( that is not how the corenet interfaces are used) but for example if you hover over an interface call for example files_search_etc() it will tell you in a tooltip what parameters it takes (in this example $1 is domain) But also with the $* variables once you get familiar with policy you basically know what parameters are needed to accomplish a valid access vector or set of access vectors. The corenet interfaces are generated automatically when you declare a port type. So these interfaces are very consistent (each port type as the same set of interfaces to use. The only difference is the type prefix in the interface names.
Attachment:
signature.asc
Description: OpenPGP digital signature
-- selinux mailing list selinux@xxxxxxxxxxxxxxxxxxxxxxx https://admin.fedoraproject.org/mailman/listinfo/selinux
