Jeff Vander Stoep 99fc177b5a Add neverallow support for ioctl extended permissions ...

Neverallow rules for ioctl extended permissions will pass in two
cases:
1. If extended permissions exist for the source-target-class set
   the test will pass if the neverallow values are excluded.
2. If extended permissions do not exist for the source-target-class
   set the test will pass if the ioctl permission is not granted.

Signed-off-by: Jeff Vander Stoep <jeffv@google.com>
Acked-by:  Nick Kralevich <nnk@google.com>
Acked-by:  Stephen Smalley <sds@tycho.nsa.gov>

2015-09-22 10:52:47 -04:00

..

sepol

Add neverallow support for ioctl extended permissions

2015-09-22 10:52:47 -04:00

Makefile

libsepol: build cil into libsepol

2014-08-26 08:03:31 -04:00