X-Recipient: archive-cygwin AT delorie DOT com
DomainKey-Signature: a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:message-id:date:from:mime-version:to:subject
	:references:in-reply-to:content-type:content-transfer-encoding;
	 q=dns; s=default; b=fHvNqESO36Y6YgvDiLPwe9KxnSq8Z/OBEiPOeOStGer
	zTHyYZTy+NdV4hm9hflLS915Wem+8PD3M6e2gGcxvdm0vFuRKbXEbb/7yvRiS+tf
	66vvJjRdoktFxi/UoZC82JilJ0XiejUoOd7Jxmy5dfGjTaQf/mlQayohMqvNObk8
	=
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:message-id:date:from:mime-version:to:subject
	:references:in-reply-to:content-type:content-transfer-encoding;
	 s=default; bh=usZEvWsosEfXabv1EV9uKAzVjmw=; b=atyvQHfKE1b/X/De9
	SPauz5Ga/xJi/G2WPC25kTSOelp0+gYxsTlmz+v2jpR8Jv/nvmOPuxSEWx9aUV+w
	iN1Gn8ZE7f1DTZWcl6BLoyJq2X4GB1eiinUe7f5RHd22zMzKSWeO3I2Xti2G2v0N
	+1jmcRdKNjABk9VP6sN1FcqPAQ=
Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Id: <cygwin.cygwin.com>
List-Subscribe: <mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive: <http://sourceware.org/ml/cygwin/>
List-Post: <mailto:cygwin AT cygwin DOT com>
List-Help: <mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender: cygwin-owner AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
Delivered-To: mailing list cygwin AT cygwin DOT com
Authentication-Results: sourceware.org; auth=none
X-Virus-Found: No
X-Spam-SWARE-Status: No, score=-1.8 required=5.0 tests=AWL,BAYES_00,RP_MATCHES_RCVD autolearn=ham version=3.3.2
X-HELO: etr-usa.com
Message-ID: <538CBD76.4030903@etr-usa.com>
Date: Mon, 02 Jun 2014 12:07:50 -0600
From: Warren Young <warren AT etr-usa DOT com>
User-Agent: Mozilla/5.0 (Windows NT 6.3; WOW64; rv:24.0) Gecko/20100101 Thunderbird/24.5.0
MIME-Version: 1.0
To: Cygwin-L <cygwin AT cygwin DOT com>
Subject: Re: Are there any SELinux tools available for Cygwin?
References: <1401440703000-108952 DOT post AT n5 DOT nabble DOT com> <5388CD7E DOT 5010800 AT etr-usa DOT com> <1401525653800-108975 DOT post AT n5 DOT nabble DOT com> <CAAeCd-OrJiExq2hUZ2-6RR0Nzz0GpeoVBaCgzPYEbEjykrH9nw AT mail DOT gmail DOT com> <1401561239482-108983 DOT post AT n5 DOT nabble DOT com>
In-Reply-To: <1401561239482-108983.post@n5.nabble.com>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
X-IsSubscribed: yes

On 5/31/2014 12:33, PolarStorm wrote:
> I'd like to
> refrain from having to run long remote sessions on each machine while
> experimentally editing all the various policy files. Downloading all files
> in
> one go and doing analysis and editing locally, is why I wanted to do this
> on Cygwin.

How is that easier?  You have to test each experimental edit, and that 
requires a Linux kernel running SELinux.  Cygwin is not a Linux kernel.

Personally, if I were still experimenting, I'd spin up a VM configured 
like the system I intended to modify, do my work on it, then ship a 
completed policy set to the remote system.  Linux VM how-tos are 
off-topic here, though.

> Another
> point is that there seem to exist ~3 different "flavors" of SELinux
> implementations,

What point are you making here, exactly?  Do you want Cygwin to emulate 
one of them, or all of them, or none of them?

I think all three choices are doomed, each for a different reason.

> As the next generation (>=KitKat) of Android mobile devices will all be
> distributed with SEAndroid in Enforced mode, by default. These tools
> will be exponentially of more interest to developers, as local editing
> on mobile devices are either crippled, poorly implemented and tested,
> or extremely inconvenient.

That's why the Android SDK includes an emulator, which is a VM, just as 
I described above.

Are you aware that some of the text editors ported to Cygwin can edit a 
file over SSH?  For instance, vim:

    vim scp://user AT remotehost:password/path/to/file

The edit proceeds at local speeds.  A save takes a remote file upload, 
but you had to do that anyway.

> I was hoping someone else would
> have been interested enough to have tried to build these.

You aren't going to find SystemTap or iptables tools for Cygwin, either? 
  Why?  Same reason: you need a running Linux kernel to make any use of 
them, and Cygwin is not a Linux kernel.

--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple