On Thu, Mar 26, 2015 at 1:24 PM, Stephen Smalley <sds@xxxxxxxxxxxxx> wrote: > > On 03/26/2015 03:30 PM, Yuli Khodorkovskiy wrote: > > Since the secilc compiler is independent of libsepol, move secilc out of > > libsepol. Linke secilc dynamically rather than statically with libsepol. > > > > - Move secilc source, test policies, docs, and secilc manpage to secilc > > directory. > > - Remove unneeded Makefile from libsepol/cil. To build secilc, run make > > in the secilc directory. > > - Add target to install the secilc binary to /usr/bin/. > > - Create an Android makefile for secilc and move secilc out of libsepol > > Android makefile. > > - Add cil_set_mls to libsepol public API as it is needed by secilc. > > - Remove policy.conf from testing since it is no longer used. > > > > Signed-off-by: Yuli Khodorkovskiy <ykhodorkovskiy@xxxxxxxxxx> > > Hmmm...will have to think about how we want to handle this in future > releases and in Android. Presently we generate separate tar releases > for each component, not the entire tree, so it introduces a new > component that distributions will need to add, and Android would have to > introduce an external/secilc project or just keep stuffing it under > libsepol for convenience. For Android, we could create a new external/selinux project for storing a mirror of https://github.com/SELinuxProject/selinux . Having separate repositories for libselinux and libsepol has always struck me as odd. > > > _______________________________________________ > Selinux mailing list > Selinux@xxxxxxxxxxxxx > To unsubscribe, send email to Selinux-leave@xxxxxxxxxxxxx. > To get help, send an email containing "help" to Selinux-request@xxxxxxxxxxxxx. -- Nick Kralevich | Android Security | nnk@xxxxxxxxxx | 650.214.4037 _______________________________________________ Selinux mailing list Selinux@xxxxxxxxxxxxx To unsubscribe, send email to Selinux-leave@xxxxxxxxxxxxx. To get help, send an email containing "help" to Selinux-request@xxxxxxxxxxxxx.
