|Main Archive Page > Month Archives > fedora-selinux archives|
On 08/29/2010 02:55 PM, Mr Dash Four wrote:
>> As for looking stuff up, i use eclipse-slide. Basically i have refpolicy
>> imported into slide and build in slide that will expose the macros so
>> you can just hover over them and see their contents or alter click and
>> choose open declaration or just click them and look in the declaration
>> pane. Theres also a filter window which lets you easily search for
> Bummer! I use Eclipse extensively in my everyday job (as well as at
> home) and that is the first time I've read about eclipse-slide!
> Google reveals this - http://oss.tresys.com/projects/slide/wiki/download
> - and from this it seems a pretty handy tool to have. Does it resolve
> macros with $1 and/or $2 in their names (like corenet_bind_dns_port ->
> corenet_bind_$1_port for example)?
Not like that ( that is not how the corenet interfaces are used) but for
example if you hover over an interface call for example
files_search_etc() it will tell you in a tooltip what parameters it
takes (in this example $1 is domain)
But also with the $* variables once you get familiar with policy you
basically know what parameters are needed to accomplish a valid access
vector or set of access vectors.
The corenet interfaces are generated automatically when you declare a
port type. So these interfaces are very consistent (each port type as
the same set of interfaces to use. The only difference is the type
prefix in the interface names.
-- selinux mailing list email@example.com https://admin.fedoraproject.org/mailman/listinfo/selinux