On Fri, Mar 16, 2012 at 2:21 PM, Christopher J. PeBenito <cpebenito@xxxxxxxxxx> wrote: > On 03/16/12 01:46, lkcl luke wrote: >> second: did that idea of dynamically allowing bits of binary-compiled >> se-linux permissions ever get implemented? last time i was on this >> list (eek, 2004?), the whole SE/Linux precompiled blob was just that: >> one huge humungous gelatinous blob that you couldn't mess with, not >> without doing a tooootal recompile using the m4 macros. > > Yes, we do have modular policy now. Right now they are compiled, but hopefully we'll eventually be able to set to text modules. You compile .pp files that have some compiled policy and optional a .fc, and link them together into the policy.2x thanks christopher, this is really useful and valuable stuff which will help in the evaluation process. l. -- This message was distributed to subscribers of the selinux mailing list. If you no longer wish to subscribe, send mail to majordomo@xxxxxxxxxxxxx with the words "unsubscribe selinux" without quotes as the message.
