Tresys has open-sourced SETools 4, available on GitHub: https://github.com/TresysTechnology/setools The current development state is alpha; this is a reimplementation of SETools using Python. Only CLI tools have been implemented so far, but the GUI tools will eventually return. Presently, the code uses SETools 3's libqpol library (with SWIG wrapper) to provide the low-level access to the binary policy file. Going forward, we'd like to propose an upstream library which would provide a low-level policy query interface; this could be useful for other tools such as dispol and sepolicy-analyze (from the seandroid repo). The focus of the effort thus far has been: * Implement core functionality * Implement unit testing There are functional versions (with varying completeness) of the following tools: * sedta (a new CLI tool for domain transition analysis) * seinfo * seinfoflow (a new CLI tool for information flow analysis) * sesearch To use SETools 4, the following packages are required: * Python 2.7 * sepolgen * NetworkX * SETools 3 libraries w/Python wrappers (git version) To install SETools or run the unit tests, the Python setuptools package is also required. The TODO list is still lengthy, but here are a few major areas that need attention: * complete the Python policy representation classes (e.g. users, constraints, etc.) * comprehensive component queries (role query, user query, class query, etc.) * full permission map handling (e.g. find permissions in policy that are unmapped, save to file) If you are interested in contributing, GitHub's pull request feature is strongly preferred for submitting patches, but patches can also be sent to this mail list. Please include unit tests. -- Chris PeBenito Tresys Technology, LLC www.tresys.com | oss.tresys.com _______________________________________________ Selinux mailing list Selinux@xxxxxxxxxxxxx To unsubscribe, send email to Selinux-leave@xxxxxxxxxxxxx. To get help, send an email containing "help" to Selinux-request@xxxxxxxxxxxxx.
