Daniel J Walsh wrote:
Caleb and Josh, What do you think of putting the new version of libsemanage into F14? Do you think it is ready?
I don't think it is advisable. The current patchset makes use of a 'new' kind of policy that is really the 3 parts of a refpolicy module combined into a single file. The end system then pulls out all the interface files and uses the entire Refpolicy build infrastructure to build a policy.
While that has uses (changing interfaces changes callers of the interface, for example) it also means every end system would have to have m4, sed, awk, checkpolicy and all the magic unicorns that are part of building refpolicy.
Once we have a minimal CIL (without the transformation language, for example) and a proper Refpolicy compiler much of this will be hidden away behind the library it will be much more suitable.
I believe waiting until F15 is definitely the best idea, we never really intended for a wider audience to use the current way because it is non-ideal and has a number of hacks to make it work. It is mainly available for people who want to work on it, see what it going to be coming up or otherwise curious.
-- This message was distributed to subscribers of the selinux mailing list. If you no longer wish to subscribe, send mail to majordomo@xxxxxxxxxxxxx with the words "unsubscribe selinux" without quotes as the message.
