| Main Archive Page > Month Archives > selinux archives |
Re: Next policyrep patches
From: Joshua Brindle <method_at_nospam>Date: Fri Apr 27 2007 - 15:40:20 GMT
To: Karl MacMillan <kmacmillan@mentalrootkit.com>
Karl MacMillan wrote:
> Here is my plan for the next set of policyrep patches:
>
> 1. Basic policy objects (sepol/policy.h). Basic object system and
> top-level objects for the policy representation.
>
> 2. Policy components (each as a separate patch). For example, type
> declarations (which would include type and typealias) would be a patch
> adding include/sepol/types.h and src/types.c.
>
> For existing components (like booleans), I would like to merge the
> record and component files. So booleans.h and boolean_record.h would be
> merged. Objections?
>
>
fine with me.
> 3. When all of the components are merged I'll send the parser changes.
> This is the first patch that will cause breakage. Any objection to
> checkmodule being broken for a while?
>
Its well understood that the branch is going to be broken for a while,
there is no way around that if we expect to do the development in a
distributed way.
I'd like the components and tree structure as soon as possible so that we can start work on the linker and generator (expander).
This brings up some other questions, there is no such thing as an expander anymore, its really a code generator, do we want to change the API to reflect that difference or just leave the current sepol_expand_module function? I guess the general question is, how destructive are we looking to be with the exported API? -- This message was distributed to subscribers of the selinux mailing list. If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with the words "unsubscribe selinux" without quotes as the message.