Hello. Darrell wrote: > Do you have any plans to create an ncurses caitsith-editpolicy similar > to ccs-editpolicy? I've been contemplating migrating from CCS to > Caitsith and miss the ncurses editor for in-memory policy editing. Since I think that caitsith-loadpolicy and caitsith-queryd are sufficient for editing in-memory policy configuration ( /proc/caitsith/policy or /sys/kernel/security/caitsith/policy ), I don't have a plan to create caitsith-editpolicy . Since TOMOYO modifies in-memory policy configuration, we use ccs-editpolicy or tomoyo-editpolicy for browsing and editing in-memory policy configuration. But since CaitSith does not, there is little need for browsing and editing in-memory policy configuration using a dedicated tool. You can run caitsith-savepolicy when you modified in-memory policy configuration using caitsith-loadpolicy or caitsith-queryd .
TOMOYO
Fork