Christopher Pardy wrote:
Did you forget to do reply to all?
yes!
If that's the best way to go fine, however the xml file is only
generated when I acutually compile the modules if I install a module
through semanage any data that module adds will be left out. I
certainly wouldn't be opposed to extending policy.xml as part of this
but there needs to be a way for installed modules to work too.
Additionally if we're going to continue the trend of using policy.xml
for management rather than development we really should move it.
One of the things that we want CIL to do is have the ability to embed
documentation for purposes such as debugging into the language. This would allow
the documentation to make it all the way into the module store and would be
retrievable by tools.
For reference we started talking about CIL here:
http://marc.info/?l=selinux&m=124784581623125&w=2
though we haven't gotten very far in the discussion.
--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@xxxxxxxxxxxxx with
the words "unsubscribe selinux" without quotes as the message.
