ANN: SETools Release

Christopher J. PeBenito cpebenito at
Thu Feb 8 18:21:55 UTC 2007

A new release of SETools is now available on the Tresys OSS site, from  The primary change in this release is the
addition of support for loading sets of policy modules in all of the
tools.  This enables analysis of the policy with nearly all of the
information available from the original source policy, such as original
attribute names.  The complete change log for this release follows.

SETools 3.1:


  * All tools that open a policy now support loadable policy modules.
    Command line tools expect the first module to be a base module
    followed optionally by any other modules.  Graphical tools have
    a new open policy dialog to select a base module and any number of
    additional modules.

  * Release of RPM packages that are compatible with Fedora Core 5 and
    6.  The spec and support files are in packages/rpm.


  * New class apol_policy_path_t to represent a base policy and any
    number of modules.  Use this whenever referring to the file or
    files constituting a policy.

  * Policy features such as attribute names or MLS can now be queried
    individally via qpol_policy_has_capability() rather than inferred
    by policy type and version.

  * New class qpol_module_t to represent a particular policy module
    prior to it being linked into a base policy (qpol_policy_t).


  * Rewrite of library to have proper namespaces.  libseaudit is now
    fully documented and suitable for third-party users.


  * Rewrite to use new libseaudit.

  * Numerous tweaks to the interface to be more user friendly.


  * Rewrite to use new libseaudit.


  * Numerous tweaks to the interface to be more user friendly.

Chris PeBenito
Tresys Technology, LLC
(410) 290-1411 x150

More information about the fedora-selinux-list mailing list