On Tue, 2012-09-18 at 10:46 -0700, William Roberts wrote: > How hard is it to parse the header, is it a simple fixed with field? > > > I could go either way on this, I like have the version number in the > file name myself. See the beginning of policydb_read() in security/selinux/ss/policydb.c. Fairly straightforward, especially as we can presume that it is a SELinux kernel policy. We would just read and check the magic number, skip the fixed string identifier, and read the version number. -- Stephen Smalley National Security Agency -- This message was distributed to subscribers of the selinux mailing list. If you no longer wish to subscribe, send mail to majordomo@xxxxxxxxxxxxx with the words "unsubscribe selinux" without quotes as the message.