On 7/17/2014 4:37 PM, Stephen Smalley wrote: > On 07/17/2014 04:04 PM, Steve Lawrence wrote: >> On 07/17/2014 03:48 PM, Stephen Smalley wrote: >>> On 07/17/2014 03:10 PM, Stephen Smalley wrote: >> Yep, we store both HLL and CIL. They are both compressed and CIL >> compresses decently since it's just text, but it's still a lot of text. >> >>> Is there an option to discard the .pp files altogether and only retain >>> the cil files? >> >> Not at the moment, but it wouldn't be hard to accomplish. Just need to >> delete all the hll files and change the contents of lang_ext to 'cil'. >> Something we could add if storage is an issue. [...] > Not sure what benefit there is in retaining the pp files, since they > carry no additional information AFAIK and they aren't human viewable or > editable. Is there even an option for exporting modules from the policy > store currently that would allow extracting them except via direct file > access to the policy store? If we eventually have an upstream policy query library, then it could be useful to export modules from the store for analysis tools. Then you could analyze the policy.29 but potentially have backtracing to the HLL policy file and ideally source line where possible (obviously not for .pp). -- Chris PeBenito Tresys Technology, LLC www.tresys.com | oss.tresys.com _______________________________________________ Selinux mailing list Selinux@xxxxxxxxxxxxx To unsubscribe, send email to Selinux-leave@xxxxxxxxxxxxx. To get help, send an email containing "help" to Selinux-request@xxxxxxxxxxxxx.
