Doing a seinfo/sesearch diff between the policy built from source and from binary would be a need in short term.
Especially since applying binary rules makes things more explicit and heavy, and doesn't check neverallow.
Hopefully this even could be done in continuous integration.
Doing a seinfo/sesearch diff between the policy built from source and from binary would be a need in short term. Especially since applying binary rules makes things more explicit and heavy, and doesn't check neverallow.
Hopefully this even could be done in continuous integration.