On 07/17/2014 02:58 PM, Steve Lawrence wrote:
On 07/17/2014 02:02 PM, Stephen Smalley wrote:
On 07/17/2014 09:49 AM, Steve Lawrence wrote:
On 07/16/2014 03:00 PM, Stephen Smalley wrote:
On 07/16/2014 11:53 AM, Dominick Grift wrote:
On Wed, 2014-07-16 at 11:11 -0400, Steve Lawrence wrote:
<snip>
Any chance of getting a hll compiler for refpolicy source modules, i.e.
in .if/.te/.fc form?
That's in the plan. Jim has a tool that will compile .if/.te/.fc to CIL,
but the current HLL infrastructure may need some changes before that can
be supported. I think the main problem is that Jim's tool needs
knowledge of all modules to be able to convert them to CIL, but the
current HLL infrastructure compiles each module separately. We have
various ideas on how we can update the HLL infrastructure to support
this, but we've primarily been focused on getting the core CIL/HLL
functionality complete and upstreamed before focusing on the more
complicated HLL patterns.
My tool currently does need to have knowledge of all modules, but I think that I
can get it to work with the information in /usr/share/selinux/devel/include. At
least as long as the module is not doing anything crazy with m4.
--
James Carter <jwcart2@xxxxxxxxxxxxx>
National Security Agency
_______________________________________________
Selinux mailing list
Selinux@xxxxxxxxxxxxx
To unsubscribe, send email to Selinux-leave@xxxxxxxxxxxxx.
To get help, send an email containing "help" to Selinux-request@xxxxxxxxxxxxx.
