HarryCiao wrote: > Hi Joshua and Stephen, > > I happened to have one more question about the link & expand process. > > Now that once the link process is complete, the base.p_xxx tables would be > "complete", that is, it would not only contain all identifiers defined in p_xxx > tables of all modules(AKA, the global block of a module), but also all > identifiers defined in avrule_decl_t.symtab[] for all block/decl of all modules. > Sorry for the late response, I think the PDF caused this to go to my spam folder... It wasn't strictly necessary to have full symbol tables per avrule_block in order to track declaration and requiring symbols but they were used because the hash table implementation and all supporting functions were already present in the library. In retrospect this could be a source of excess memory consumption and module size on disk but it was simply easier and faster to implement at the time. -- This message was distributed to subscribers of the selinux mailing list. If you no longer wish to subscribe, send mail to majordomo@xxxxxxxxxxxxx with the words "unsubscribe selinux" without quotes as the message.