avtab reduction, binary policy format version change

[Stephen Smalley <sds@xxxxxxxxxxxxx>]

Hi,

The patches to libsepol and checkpolicy for reducing the size and number
of avtab nodes have been committed to the sourceforge CVS tree as of
libsepol 1.7.13 and checkpolicy 1.25.8.  The kernel patch is going to be
submitted soon for -mm, but will not go into mainline until 2.6.14.  The
binary policy format version has been incremented to version 20.  To
build a policy for older kernels, you will need to use the -c 19 option
to checkpolicy.  The patches for the kernel, libsepol, and checkpolicy
are also available from http://www.flux.utah.edu/~sds/, as are complete
patched tarballs of libsepol and checkpolicy.

The policy Makefile will likely need to be adjusted again to generate
both version 19 and version 20 policies during the transition, and to
load the appropriate one based on the kernel policy version.

-- 
Stephen Smalley
National Security Agency


--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@xxxxxxxxxxxxx with
the words "unsubscribe selinux" without quotes as the message.