Re: Selinux bash prompt decorations

[Paul Jarc]

Steve Grubb <sgrubb@redhat.com> wrote:
> Its not poor practice to make something usable for people.
...
> For the moment, we are going the route of doing this via `id -Z`. But I 
> thought there was a common problem across secure distributions that we could 
> create a standard for. TSOL could link to its libraries, RHEL could link to 
> libselinux, etc.

Having a common interface to all of these libraries would be good.
But adding new mechanisms to other programs to use those libraries,
when they can just as easily get to the same functionality via
existing mechanisms like command substitution, is not good.
Interdependencies should be kept to a minimum, and pushed to as high a
level as possible.  Instead of modifying bash to call some
standardized get_security_role() function, put a standardized
`get-security-role` command in PS1.


paul