This patch set moves the code to generate CIL from pp.c in
policycoreutils/hll/pp to libsepol, adds a new function to generate CIL from a
module policydb, and modifies checkpolicy and checkmodule to support generating
CIL as their output.
The primary motivation of this work is to allow SE for Android to use the CIl
compiler. Converting the policy.conf to CIL and then compiling to the kernel
binary policy results in a policy that is about 20% smaller. The smaller size is
because type expressions with negations are converted to type attribute sets in
CIL instead of being expanded.
--
James Carter <jwcart2@xxxxxxxxxxxxx>
National Security Agency
_______________________________________________
Selinux mailing list
Selinux@xxxxxxxxxxxxx
To unsubscribe, send email to Selinux-leave@xxxxxxxxxxxxx.
To get help, send an email containing "help" to Selinux-request@xxxxxxxxxxxxx.
