2efeea2
diff -up libselinux-2.0.77/include/selinux/avc.h.jx libselinux-2.0.77/include/selinux/avc.h
2efeea2
--- libselinux-2.0.77/include/selinux/avc.h.jx	2009-01-27 14:47:32.000000000 -0500
2efeea2
+++ libselinux-2.0.77/include/selinux/avc.h	2009-03-02 13:58:11.000000000 -0500
2efeea2
@@ -427,6 +427,29 @@ void avc_av_stats(void);
2efeea2
  */
2efeea2
 void avc_sid_stats(void);
2efeea2
 
2efeea2
+/**
2efeea2
+ * avc_netlink_acquire_fd - Acquire netlink socket fd.
2efeea2
+ *
2efeea2
+ * Allows the application to manage messages from the netlink socket in
2efeea2
+ * its own main loop.
2efeea2
+ */
2efeea2
+int avc_netlink_acquire_fd(void);
2efeea2
+
2efeea2
+/**
2efeea2
+ * avc_netlink_release_fd - Release netlink socket fd.
2efeea2
+ *
2efeea2
+ * Returns ownership of the netlink socket to the library.
2efeea2
+ */
2efeea2
+void avc_netlink_release_fd(void);
2efeea2
+
2efeea2
+/**
2efeea2
+ * avc_netlink_check_nb - Check netlink socket for new messages.
2efeea2
+ *
2efeea2
+ * Called by the application when using avc_netlink_acquire_fd() to
2efeea2
+ * process kernel netlink events.
2efeea2
+ */
2efeea2
+int avc_netlink_check_nb(void);
2efeea2
+
2efeea2
 #ifdef __cplusplus
2efeea2
 }
2efeea2
 #endif
2efeea2
diff -up libselinux-2.0.77/src/avc.c.jx libselinux-2.0.77/src/avc.c
2efeea2
--- libselinux-2.0.77/src/avc.c.jx	2009-01-27 14:47:32.000000000 -0500
2efeea2
+++ libselinux-2.0.77/src/avc.c	2009-03-02 13:58:11.000000000 -0500
2efeea2
@@ -812,7 +812,7 @@ int avc_has_perm_noaudit(security_id_t s
2efeea2
 	access_vector_t denied;
2efeea2
 	struct avc_entry_ref ref;
2efeea2
 
2efeea2
-	if (!avc_using_threads) {
2efeea2
+	if (!avc_using_threads && !avc_app_main_loop) {
2efeea2
 		(void)avc_netlink_check_nb();
2efeea2
 	}
2efeea2
 
2efeea2
diff -up libselinux-2.0.77/src/avc_internal.c.jx libselinux-2.0.77/src/avc_internal.c
2efeea2
--- libselinux-2.0.77/src/avc_internal.c.jx	2009-01-27 14:47:32.000000000 -0500
2efeea2
+++ libselinux-2.0.77/src/avc_internal.c	2009-03-02 13:58:11.000000000 -0500
2efeea2
@@ -34,6 +34,7 @@ void (*avc_func_log) (const char *, ...)
2efeea2
 void (*avc_func_audit) (void *, security_class_t, char *, size_t) = NULL;
2efeea2
 
2efeea2
 int avc_using_threads = 0;
2efeea2
+int avc_app_main_loop = 0;
2efeea2
 void *(*avc_func_create_thread) (void (*)(void)) = NULL;
2efeea2
 void (*avc_func_stop_thread) (void *) = NULL;
2efeea2
 
2efeea2
@@ -250,3 +251,15 @@ void avc_netlink_loop(void)
2efeea2
 		"%s:  netlink thread: errors encountered, terminating\n",
2efeea2
 		avc_prefix);
2efeea2
 }
2efeea2
+
2efeea2
+int avc_netlink_acquire_fd(void)
2efeea2
+{
2efeea2
+    avc_app_main_loop = 1;
2efeea2
+
2efeea2
+    return fd;
2efeea2
+}
2efeea2
+
2efeea2
+void avc_netlink_release_fd(void)
2efeea2
+{
2efeea2
+    avc_app_main_loop = 0;
2efeea2
+}
2efeea2
diff -up libselinux-2.0.77/src/avc_internal.h.jx libselinux-2.0.77/src/avc_internal.h
2efeea2
--- libselinux-2.0.77/src/avc_internal.h.jx	2009-01-27 14:47:32.000000000 -0500
2efeea2
+++ libselinux-2.0.77/src/avc_internal.h	2009-03-02 13:58:11.000000000 -0500
2efeea2
@@ -35,6 +35,7 @@ extern void (*avc_func_log) (const char 
2efeea2
 extern void (*avc_func_audit) (void *, security_class_t, char *, size_t)hidden;
2efeea2
 
2efeea2
 extern int avc_using_threads hidden;
2efeea2
+extern int avc_app_main_loop hidden;
2efeea2
 extern void *(*avc_func_create_thread) (void (*)(void))hidden;
2efeea2
 extern void (*avc_func_stop_thread) (void *)hidden;
2efeea2
 
2efeea2
@@ -184,7 +185,6 @@ int avc_ss_set_auditdeny(security_id_t s
2efeea2
 /* netlink kernel message code */
2efeea2
 extern int avc_netlink_trouble hidden;
2efeea2
 int avc_netlink_open(int blocking) hidden;
2efeea2
-int avc_netlink_check_nb(void) hidden;
2efeea2
 void avc_netlink_loop(void) hidden;
2efeea2
 void avc_netlink_close(void) hidden;
2efeea2
 
2efeea2
diff -up libselinux-2.0.77/src/selinuxswig.i.jx libselinux-2.0.77/src/selinuxswig.i
2efeea2
--- libselinux-2.0.77/src/selinuxswig.i.jx	2009-03-02 13:58:11.000000000 -0500
2efeea2
+++ libselinux-2.0.77/src/selinuxswig.i	2009-03-02 14:07:42.000000000 -0500
2efeea2
@@ -78,6 +78,11 @@
2efeea2
 %ignore selinux_set_mapping;
2efeea2
 %ignore security_id;
2efeea2
 
2efeea2
+/* Ignore netlink stuff for now */
2efeea2
+%ignore avc_netlink_acquire_fd;
2efeea2
+%ignore avc_netlink_release_fd;
2efeea2
+%ignore avc_netlink_check_nb;
2efeea2
+
2efeea2
 %include "../include/selinux/selinux.h"
2efeea2
 %include "../include/selinux/avc.h"
2efeea2
 %include "../include/selinux/get_default_type.h"