-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Currently we have lots of apps trying to figure out which policy is installed on the system, We have a function selinux_binary_policy_path which returns a path like '/etc/selinux/targeted/policy' Then these apps do stuff like: VER=`cat /sys/fs/selinux/policyver` while [ -e '/etc/selinux/targetd/policy. + $VER' ]; do VER=$VER-1 done While we have had /sys/fs/selinux/policy for a while now. I wanted to add an interface to return this path, but I was trying to figure out a name selinux_loaded_policy_path for example, but as Eric pointed out to me, selinux_binary_policy_path is what most users would expect to return this. If you look at the man page it even suggest this. man selinux_binary_policy_path ... selinux_binary_policy_path() - binary policy file loaded into kernel Currently the users of this function are the libselinux package, setools and policycorutils (sepolgen-ifgen). I am torn between adding stealing this function to return the /sys/fs/selinux/policy and then adding selinux_installed_policy_path for the original function, then updating the effected packages. The problem with this is we would have different behaviour between older versions of the library. The other options would be to come up with a better name for the new function and fix the man pages. Suggestions welcomed. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iEYEARECAAYFAk89Fu8ACgkQrlYvE4MpobNimgCeIIpi+6Yee+GfyUlRV+n7jvaE 39MAn064N3sRCAdpyseBKFrGR3+ojrEI =+Byb -----END PGP SIGNATURE----- -- This message was distributed to subscribers of the selinux mailing list. If you no longer wish to subscribe, send mail to majordomo@xxxxxxxxxxxxx with the words "unsubscribe selinux" without quotes as the message.