In an earlier email you asked if the constraint information that is now available from libsepol could be added to the debug mode of checkpolicy. Well I've completed a patch that allows this, however I also added facilities to output mls/validatetrans expressions as well. The two patches add a new sepol_validate_transition_reason_buffer() function to libsepol and updates checkpolicy to call this and also sepol_compute_av_reason_buffer(). Hope they are a useful addition. Richard Haines (2): libsepol: Add sepol_validate_transition_reason_buffer function checkpolicy: Add debug feature to display constraints / validatetrans checkpolicy/checkpolicy.c | 110 ++++++++++++++++++++++++++++- libsepol/include/sepol/policydb/services.h | 14 ++++ libsepol/src/services.c | 80 +++++++++++++++++++-- 3 files changed, 198 insertions(+), 6 deletions(-) -- 1.8.3.1 -- This message was distributed to subscribers of the selinux mailing list. If you no longer wish to subscribe, send mail to majordomo@xxxxxxxxxxxxx with the words "unsubscribe selinux" without quotes as the message.
