Re: Exposing secid to secctx mapping to user-space

2015-12-15 Thread Joe Nall
> On Dec 15, 2015, at 10:06 AM, Casey Schaufler wrote: > > ... > I have long wondered why SELinux generates the context string > of the secid more than once. Audit performance alone would > justify keeping it around. The variable length issue isn't > so difficult as you

Re: Exposing secid to secctx mapping to user-space

2015-12-15 Thread Joe Nall
> On Dec 15, 2015, at 12:03 PM, Stephen Smalley <s...@tycho.nsa.gov> wrote: > > On 12/15/2015 12:19 PM, Joe Nall wrote: >> >>> On Dec 15, 2015, at 10:06 AM, Casey Schaufler <ca...@schaufler-ca.com> >>> wrote: >>> >>> ... &g