On Thu, Jun 12, 2008 at 1:48 PM, Stephen Smalley <sds@xxxxxxxxxxxxx> wrote: > > On Thu, 2008-06-12 at 13:38 -0500, Xavier Toth wrote: >> I wasn't aware until yesterday that there was an API for looking up >> security classes (selinux_set_mapping, the name of which doesn't >> strike me as very intuitive). Can I also lookup the access vectors for >> a class, if so how? > > selinux_set_mapping() does that too. dynamic discovery of classes and > permissions was discussed quite a bit on list. XSELinux uses it, and so > does SE-Postgres. > > -- > Stephen Smalley > National Security Agency > > I see the posting of the patch but no discussion. Yesterday Eamon posted an example of setting the mapping of a security class but it didn't address perms. I have some python code where I'm calling selinux.avc_has_perm_noaudit and have been using hard coded values for the security class and perm. I'd like to fix this code but am not sure if this or some other capability I'm unaware of will do the trick. -- This message was distributed to subscribers of the selinux mailing list. If you no longer wish to subscribe, send mail to majordomo@xxxxxxxxxxxxx with the words "unsubscribe selinux" without quotes as the message.
