Eric Paris aa893269de SELinux: allow default source/target selectors for user/role/range ... When new objects are created we have great and flexible rules to determine the type of the new object. We aren't quite as flexible or mature when it comes to determining the user, role, and range. This patch adds a new ability to specify the place a new objects user, role, and range should come from. For users and roles it can come from either the source or the target of the operation. aka for files the user can either come from the source (the running process and todays default) or it can come from the target (aka the parent directory of the new file) examples always are done with directory context: system_u:object_r:mnt_t:s0-s0:c0.c512 process context: unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 [no rule] unconfined_u:object_r:mnt_t:s0 test_none [default user source] unconfined_u:object_r:mnt_t:s0 test_user_source [default user target] system_u:object_r:mnt_t:s0 test_user_target [default role source] unconfined_u:unconfined_r:mnt_t:s0 test_role_source [default role target] unconfined_u:object_r:mnt_t:s0 test_role_target [default range source low] unconfined_u:object_r:mnt_t:s0 test_range_source_low [default range source high] unconfined_u:object_r:mnt_t:s0:c0.c1023 test_range_source_high [default range source low-high] unconfined_u:object_r:mnt_t:s0-s0:c0.c1023 test_range_source_low-high [default range target low] unconfined_u:object_r:mnt_t:s0 test_range_target_low [default range target high] unconfined_u:object_r:mnt_t:s0:c0.c512 test_range_target_high [default range target low-high] unconfined_u:object_r:mnt_t:s0-s0:c0.c512 test_range_target_low-high Signed-off-by: Eric Paris <eparis@redhat.com>		2012-04-09 12:22:47 -04:00
..
avtab.c	SELinux: allow userspace to read policy back out of the kernel	2010-10-21 10:12:58 +11:00
avtab.h	SELinux: Use dentry name in new object labeling	2011-02-01 11:12:30 -05:00
conditional.c	selinux: Casting (void *) value returned by kmalloc is useless	2011-12-19 11:23:56 +11:00
conditional.h	selinux: sparse fix: fix several warnings in the security server code	2011-09-09 16:56:32 -07:00
constraint.h
context.h	SELinux: allow default source/target selectors for user/role/range	2012-04-09 12:22:47 -04:00
ebitmap.c	doc: Update the email address for Paul Moore in various source files	2011-08-01 17:58:33 -07:00
ebitmap.h	security:selinux: kill unused MAX_AVTAB_HASH_MASK and ebitmap_startbit	2011-01-24 10:36:11 +11:00
hashtab.c
hashtab.h
mls_types.h	selinux: allow MLS->non-MLS and vice versa upon policy reload	2010-02-04 09:06:36 +11:00
mls.c	SELinux: allow default source/target selectors for user/role/range	2012-04-09 12:22:47 -04:00
mls.h	doc: Update the email address for Paul Moore in various source files	2011-08-01 17:58:33 -07:00
policydb.c	SELinux: allow default source/target selectors for user/role/range	2012-04-09 12:22:47 -04:00
policydb.h	SELinux: allow default source/target selectors for user/role/range	2012-04-09 12:22:47 -04:00
services.c	SELinux: allow default source/target selectors for user/role/range	2012-04-09 12:22:47 -04:00
services.h
sidtab.c	selinux: cache sidtab_context_to_sid results	2010-12-07 16:44:01 -05:00
sidtab.h	selinux: cache sidtab_context_to_sid results	2010-12-07 16:44:01 -05:00
status.c	selinux: fix up style problem on /selinux/status	2010-10-21 10:12:41 +11:00
symtab.c	selinux: fix error codes in symtab_init()	2010-08-02 15:35:04 +10:00
symtab.h