1. Inflexibility a. Limitations to what can be in a module 2. Gaps in features a. User transitions b. Type inheritance 3. Ordering issues a. Unless the rules are in the same file, proper ordering cannot be guaranteed for portcon and other rules for which ordering is important 4. Confusing semantics a. Between templates and interfaces b. Between tunables and booleans c. Require rules d. Optional blocks 5. Inconsistencies in the syntax a. Some rules end with a semi-colon, others do not b. Some lists are space separated, some are comma separated c. Some lists require curly braces even when there is only one member, others do not d. For some rules the order of the rules matter, in others they do not e. File contexts start with the path -- James Carter <jwcart2@xxxxxxxxxxxxx> National Security Agency -- This message was distributed to subscribers of the selinux mailing list. If you no longer wish to subscribe, send mail to majordomo@xxxxxxxxxxxxx with the words "unsubscribe selinux" without quotes as the message.
