So we are at the point where we are trying to create a policydb out of the tree in policyrep and are wondering what the best approach is: 1) create an API in libsepol that lets us add each kind of object (symbol, rules, ocontexts, etc). For the sake of comparison this yeilds 14 functions just for symbol tables (symbol_add, role_set_type, user_set_role, level_set_alias and so on). 2) Let libpolicyrep statically link against libsepol. This creates much strangeness such as inconsistencies in the runtime behavior if libsepol changes on the system but libpolicyrep wasn't rebuilt. 3) (Karls suggestion), remove libsepol entirely and replace the libsepol api with wrappers in libpolicyrep. Thoughts? -- This message was distributed to subscribers of the selinux mailing list. If you no longer wish to subscribe, send mail to majordomo@xxxxxxxxxxxxx with the words "unsubscribe selinux" without quotes as the message.
