Compiler Wishlist

This is a community list of desired features for the SELinux compiler and policy language. Some of these may be included as part of this project. If you have more you wish to add please email them to selinux@tresys.com.

• tunables in optionals
  • declaration: tunable foo [default]
  • require { tunable foo }
• nested optionals/conditionals (to arbitrary depths)
• interfaces pushed into module language
• role attributes (I believe role dominance can be used to do this without language changes -- will investigate later)
• MLS support in modules (require sensitivities, categories), for users
• typeattribute correctly expand in conditionals