checkpolicy: Add support for generating CIL
Add support to checkpolicy and checkmodule for generating CIL as their
output.
Add new options "-C" and "--cil" to specify CIL as the output format.
Signed-off-by: James Carter <jwcart2@tycho.nsa.gov>
diff --git a/checkpolicy/checkmodule.8 b/checkpolicy/checkmodule.8
index 2a7ab5c..ee95882 100644
--- a/checkpolicy/checkmodule.8
+++ b/checkpolicy/checkmodule.8
@@ -3,7 +3,7 @@
checkmodule \- SELinux policy module compiler
.SH SYNOPSIS
.B checkmodule
-.I "[\-h] [\-b] [\-m] [\-M] [\-U handle_unknown ] [\-V] [\-o output_file] [input_file]"
+.I "[\-h] [\-b] [\-C] [\-m] [\-M] [\-U handle_unknown ] [\-V] [\-o output_file] [input_file]"
.SH "DESCRIPTION"
This manual page describes the
.BR checkmodule
@@ -25,6 +25,9 @@
Read an existing binary policy module file rather than a source policy
module file. This option is a development/debugging aid.
.TP
+.B \-C,\-\-cil
+Write CIL policy file rather than binary policy file.
+.TP
.B \-h,\-\-help
Print usage.
.TP