mirror of
https://github.com/topjohnwu/selinux.git
synced 2024-12-05 01:56:27 +00:00
74bde7fa16
The attribute to type map is used to get all of the types that are asociated with an attribute. To make neverallow and bounds checking easier it was convienent to map a type to itself. However, CIL was wrongly mapping an attribute to itself in addition to the types associated with it. This caused type bounds checking to fail if the parent was granted a permission through one attribute while the child was granted the permission through another attribute. Signed-off-by: James Carter <jwcart2@tycho.nsa.gov> |
||
|---|---|---|
| .. | ||
| include/cil | ||
| src | ||
| test | ||
| .gitignore | ||