policy database

[Stefano Carucci]

Hello all!

I would like to ask you experts some details about how the policy binary is managed by the security server. While looking through the code I noticed that the avtab (in security/selinux/ss/avtab.h/c) stores all the needed information about the rules in a hash-table. Then, on the other side there is a policy database, that, as far as I understood is meant for configuration parameters only. So my question is: what is the link betweem the policy binary file and the avtab? Are all the rules loaded into the avtab from the binary file? Is there any mechanism to fast policy lookup from the binary file? 

Thank you in advance.

Stefano

_________________________________________________________________
25 GB di spazio sempre con te. Accedi a SkyDrive!
http://www.windowslive.it/skyDrive.aspx