Userspace Todo

This is a list of potential work items that relate to the SELinux userspace components. If you are interested in helping out with one of these items, or have something you would like to add, please contact the SELinux development team using the mailing list below.

SELinux Developer's Mailing List Subscription Page
SELinux Developer's Mailing List Archive

• libselinux: Deprecate and eliminate legacy interfaces and compatibility code. Update all legacy users to newer interfaces, e.g. replace calls to matchpathcon interfaces with calls to selabel interfaces, replace most if not all SELinux userspace permission checks (security_compute_av, avc_has_perm) with calls to selinux_check_access, etc.

• libsemanage: Avoid module re-link on changes to other policy components.

• libsepol: Fix the port modify logic to support modifying ports in base policy.

• libselinux: Write missing man pages

security_canonicalize_context
security_set_boolean_list
selinux_check_passwd_access
selinux_customizable_types_path
selinux_get_callback
selinux_init_load_policy
selinux_mkload_policy
selinux_raw_to_trans_context
selinux_trans_to_raw_context
selinux_translations_path
selinux_users_path