RepoMirrors/selinux
1
0
Fork 0
mirror of https://github.com/SELinuxProject/selinux synced 2024-12-23 22:42:06 +00:00
Code Issues Packages Projects Releases Wiki Activity
672f96f012
selinux/libsepol/src/libsepol.map.in

52 lines
1.3 KiB
Plaintext
Raw Normal View History

libsepol: clean up the CIL API - No longer require the caller to create a sepol_policydb. CIL is now responsible for that - Since the user is no longer responsible for creating the policydb, two functions are added to let CIL know how it should configure the policydb, to set the policy version and the target platform - Some functions, like cil_compile, do not need a policydb. Additionally some functions, like cil_filecons_to_string use the policydb, but could be rewritten to not require it. In these cases, remove the policydb from the API, and rewrite functions so they don't depend on it. The only function that uses a policydb is cil_build_policydb - Add functions and symbolic versioning to maintain binary backwards compatability. API backwards compatability is not maintained Signed-off-by: Steve Lawrence <slawrence@tresys.com>
2015-02-13 17:30:32 +00:00
LIBSEPOL_1.0 {
initial import from svn trunk revision 2950
2008-08-19 19:30:36 +00:00
global:
libsepol: setools expects expand_module_avrules to be an exported interface of libsepol This is needed in order to build setools, although I think setools still will not fully build. It would be good if someone from setools would diagnose what is breaking. Signed-off-by: Eric Paris <eparis@redhat.com> Acked-by: Dan Walsh <dwalsh@redhat.com>
2011-09-02 12:55:09 +00:00
expand_module_avrules;
initial import from svn trunk revision 2950
2008-08-19 19:30:36 +00:00
sepol_module_package_*; sepol_link_modules; sepol_expand_module; sepol_link_packages;
sepol_bool_*; sepol_genbools*;
sepol_context_*; sepol_mls_*; sepol_check_context;
sepol_iface_*;
sepol_port_*;
sepol_node_*;
sepol_user_*; sepol_genusers; sepol_set_delusers;
sepol_msg_*; sepol_debug;
sepol_handle_*;
sepol_policydb_*; sepol_set_policydb_from_file;
sepol_policy_kern_*;
sepol_policy_file_*;
libsepol: method to check disable dontaudit flag. This patch adds the ability to check on the value of the disable_dontaudit flag in the sepol handle. In the past the only way to know the value of this was to directly read the values from the handle. The get function provides a setter-getter symmetry similar to other functions found in libsepol. Signed-off-by: Christopher Pardy <cpardy@redhat.com> Signed-off-by: Stephen Smalley <sds@tycho.nsa.gov>
2009-07-06 14:42:15 +00:00
sepol_get_disable_dontaudit;
initial import from svn trunk revision 2950
2008-08-19 19:30:36 +00:00
sepol_set_disable_dontaudit;
sepol_set_expand_consume_base;
libsepol: libsemanage: policycoreutils: Create a new preserve_tunables flag in sepol_handle_t. By default only the effective branch of a tunable conditional would be expanded and written to raw policy, while all needless unused branches would be discarded. Add a new option '-P' or "--preserve_tunables" to the semodule program. By default it is 0, if set to 1 then the above preserve_tunables flag in the sepol_handle_t would be set to 1 accordingly. Signed-off-by: Harry Ciao <qingtao.cao@windriver.com> Signed-off-by: Eric Paris <eparis@redhat.com> Acked-by: Dan Walsh <dwalsh@redhat.com>
2011-09-01 03:29:46 +00:00
sepol_get_preserve_tunables; sepol_set_preserve_tunables;
libsepol: build cil into libsepol Set DISABLE_CIL=y to build libsepol without CIL support, e.g make DISABLE_CIL=y To enable CIL support in libsepol, set DISABLE_CIL=n. This is the default if not specified. Signed-off-by: Steve Lawrence <slawrence@tresys.com>
2011-10-14 17:17:40 +00:00
cil_db_init;
cil_set_disable_dontaudit;
cil_set_disable_neverallow;
cil_set_preserve_tunables;
cil_set_handle_unknown;
cil_db_destroy;
cil_add_file;
cil_compile;
cil_build_policydb;
cil_userprefixes_to_string;
cil_selinuxusers_to_string;
cil_filecons_to_string;
cil_set_log_level;
cil_set_log_handler;
cil_set_malloc_error_handler;
initial import from svn trunk revision 2950
2008-08-19 19:30:36 +00:00
local: *;
};
libsepol: clean up the CIL API - No longer require the caller to create a sepol_policydb. CIL is now responsible for that - Since the user is no longer responsible for creating the policydb, two functions are added to let CIL know how it should configure the policydb, to set the policy version and the target platform - Some functions, like cil_compile, do not need a policydb. Additionally some functions, like cil_filecons_to_string use the policydb, but could be rewritten to not require it. In these cases, remove the policydb from the API, and rewrite functions so they don't depend on it. The only function that uses a policydb is cil_build_policydb - Add functions and symbolic versioning to maintain binary backwards compatability. API backwards compatability is not maintained Signed-off-by: Steve Lawrence <slawrence@tresys.com>
2015-02-13 17:30:32 +00:00
LIBSEPOL_1.1 {
global:
cil_build_policydb;
cil_compile;
cil_userprefixes_to_string;
cil_selinuxusers_to_string;
cil_filecons_to_string;
cil_set_target_platform;
cil_set_policy_version;
libsepol: Move secilc out of libsepol Since the secilc compiler is independent of libsepol, move secilc out of libsepol. Linke secilc dynamically rather than statically with libsepol. - Move secilc source, test policies, docs, and secilc manpage to secilc directory. - Remove unneeded Makefile from libsepol/cil. To build secilc, run make in the secilc directory. - Add target to install the secilc binary to /usr/bin/. - Create an Android makefile for secilc and move secilc out of libsepol Android makefile. - Add cil_set_mls to libsepol public API as it is needed by secilc. - Remove policy.conf from testing since it is no longer used. Signed-off-by: Yuli Khodorkovskiy <ykhodorkovskiy@tresys.com>
2015-03-31 14:17:01 +00:00
cil_set_mls;
libsepol, policycoreutils: Move functions to convert a module package to CIL Move code to convert a policy module to CIL from the policy package to CIL conversion tool, pp, in policycoreutils to libsepol. The only changes to the code are the additions of the prefix "sepol_" to the functions sepol_module_package_to_cil() and sepol_ppfile_to_module_package(). This code is being changed from GPL to LGPL with permission from Tresys. Convert pp to use the renamed functions in libsepol. Signed-off-by: James Carter <jwcart2@tycho.nsa.gov>
2015-04-01 14:03:04 +00:00
sepol_ppfile_to_module_package;
sepol_module_package_to_cil;
libsepol: add function to generate CIL from a module policydb Add a new function, sepol_module_policydb_to_cil, that generates CIL from a module (not kernel) policydb. Refactor sepol_module_package_to_cil() to use the new function. Signed-off-by: James Carter <jwcart2@tycho.nsa.gov>
2015-04-01 14:04:04 +00:00
sepol_module_policydb_to_cil;
libsepol: clean up the CIL API - No longer require the caller to create a sepol_policydb. CIL is now responsible for that - Since the user is no longer responsible for creating the policydb, two functions are added to let CIL know how it should configure the policydb, to set the policy version and the target platform - Some functions, like cil_compile, do not need a policydb. Additionally some functions, like cil_filecons_to_string use the policydb, but could be rewritten to not require it. In these cases, remove the policydb from the API, and rewrite functions so they don't depend on it. The only function that uses a policydb is cil_build_policydb - Add functions and symbolic versioning to maintain binary backwards compatability. API backwards compatability is not maintained Signed-off-by: Steve Lawrence <slawrence@tresys.com>
2015-02-13 17:30:32 +00:00
} LIBSEPOL_1.0;
Reference in New Issue Copy Permalink