Received-SPF: pass (google.com: domain of selinux-refpolicy-owner@vger.kernel.org designates 2620:137:e000::1:20 as permitted sender) client-ip=2620:137:e000::1:20;
Message-ID: <14aa07c3-5517-9855-5273-71ad1bef17df@linux.microsoft.com>
Date:   Mon, 27 Mar 2023 08:32:53 -0400
MIME-Version: 1.0
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:102.0) Gecko/20100101
 Thunderbird/102.9.0
Subject: Re: [refpolicy3 RFC] Drop suffixes?
Content-Language: en-US
To:     russell@coker.com.au, selinux-refpolicy@vger.kernel.org
References: <c0e600cf-b724-8fa9-fb9e-be847f807a22@linux.microsoft.com>
 <4896093.0VBMTVartN@xev>
From:   Chris PeBenito <chpebeni@linux.microsoft.com>
In-Reply-To: <4896093.0VBMTVartN@xev>
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 7bit
Precedence: bulk

On 3/25/2023 05:15, Russell Coker wrote:
> On Saturday, 25 March 2023 05:10:10 AEDT Chris PeBenito wrote:
>> I am considering dropping the suffixes from users, roles, and types.
>> init_t would become init, user_r would become user, etc.
> 
> Even when the syntax prevents the compiler from being confused there is a
> benefit to avoiding user confusion.  So having user_r:user_t change to
> user:user would be bad IMHO.
> 
> 22 years ago this might have been justified by reducing RAM use or something
> but that doesn't apply now.  What's the motivation for this?

Since refpolicy3 is a major change, I've been reexamining past 
decisions.  Now is the time to make significant changes.

-- 
Chris PeBenito