From: dcashman <dcashman@xxxxxxxxxxx> cil_gen_policy() appears to exist to generate a policy.conf corresponding to the original SELinux HLL from a cil_db struct. All of libsepol/cil/src/cil_policy.c appears to exist to support this functionality. This patchset provides some fixes for issues encountered when trying to go from android's policy.conf to a CIL representation (via checkpolicy) and then back to the HLL representation via cil_gen_policy(). dcashman (5): libsepol: cil: Add userrole mapping to cil_gen_policy(). libsepol: cil: Remove duplicate sid policy declaration. libsepol: cil: Replace sensitivityorder statement. libsepol: cil: Fix CIL_OP data assignment. libsepol: cil: Add cil_constraint_expr_to_policy() libsepol/cil/src/cil_policy.c | 235 ++++++++++++++++++++++++++++++++++++++++-- 1 file changed, 224 insertions(+), 11 deletions(-) -- 2.8.0.rc3.226.g39d4020 _______________________________________________ Selinux mailing list Selinux@xxxxxxxxxxxxx To unsubscribe, send email to Selinux-leave@xxxxxxxxxxxxx. To get help, send an email containing "help" to Selinux-request@xxxxxxxxxxxxx.