From: dwalsh@redhat.com (Daniel J Walsh) Date: Fri, 11 Sep 2009 10:25:32 -0400 Subject: [refpolicy] Policy file and Selinux Policy question In-Reply-To: <51af93b70909110541w1bef874h22931a6421388028@mail.gmail.com> References: <51af93b70909110541w1bef874h22931a6421388028@mail.gmail.com> Message-ID: <4AAA5DDC.7060403@redhat.com> To: refpolicy@oss.tresys.com List-Id: refpolicy.oss.tresys.com On 09/11/2009 08:41 AM, Elia Pinto wrote: > In creating an selinux policy i can define the type of policy (strict, > targeted, MLS and a custom : e,g make NAME=selinuxvariant -f > /usr/share/selinux/devel/Makefile) to which the policy file has to be > applied. > > But given a policy file (policy.pp) as it is possible to understand via > some API interface at which policies the policy file relate ? In other > words, it is redundant to have the information elsewhere on the type of > policy to which the policy file you referring to? Also the information that > the policy file is a base or loadable policy is in policy file ? If yes, how > to inquiry via selinux API ? > > Thanks a lot in advance > I guess the question I would raise, is what is varying between the policies that you feel is necessary. option_policy( ) Should handle the case where an interface is different. The only case I currently know of where you migh vary is on file context MLS Level.