Skip to content

Userspace Todo

stephensmalley edited this page Feb 24, 2015 · 23 revisions

This is a list of potential work items that relate to the SELinux userspace components. If you are interested in helping out with one of these items, or have something you would like to add, please contact the SELinux development team using the mailing list below.

SELinux Developer's Mailing List Subscription Page
SELinux Developer's Mailing List Archive

  • libsemanage: Avoid module re-link on changes to other policy components.

  • libsepol: Provide traceback to the original source allow rule on neverallow failures.

  • libselinux: Flush class/perm cache on policy reload.

  • libselinux: Port selabel_partial_match and selabel_lookup_best_match APIs and label_file backend support from Android. Look into leveraging in systemd/udev in the same manner as Android init and ueventd.

  • libsepol: Fix the port modify logic to support modifying ports in base policy.

  • libselinux: Write missing man pages

security_canonicalize_context
security_set_boolean_list
selinux_check_passwd_access
selinux_customizable_types_path
selinux_get_callback
selinux_init_load_policy
selinux_mkload_policy
selinux_raw_to_trans_context
selinux_trans_to_raw_context
selinux_translations_path
selinux_users_path