James Carter 9e6840e6a2 libsepol: Refactored neverallow checking. ... Instead of creating an expanded avtab, generating all of the avtab keys corresponding to a neverallow rule and searching for a match, walk the nodes in the avtab and use the attr_type_map and ebitmap functions to find matching rules. Memory usage is reduced from 370M to 125M and time is reduced from 14 sec to 2 sec. (Bounds checking commented out in both cases.) Signed-off-by: James Carter <jwcart2@tycho.nsa.gov>		2015-06-22 09:44:55 -04:00
..
cil	libsepol/cil: Do not allow categories/sensitivities inside blocks	2015-05-27 14:00:01 -04:00
include	libsepol: Refactored neverallow checking.	2015-06-22 09:44:55 -04:00
man	Laurent Bigonville patch to fix various minor manpage issues and correct section numbering.	2013-10-24 13:58:37 -04:00
src	libsepol: Refactored neverallow checking.	2015-06-22 09:44:55 -04:00
tests	libsepol/tests: fix gcc -Warray-bounds warning	2014-10-02 09:56:45 -04:00
utils	libsepol: Android/MacOS X build support	2012-06-28 11:21:15 -04:00
.gitignore	libsepol: build cil into libsepol	2014-08-26 08:03:31 -04:00
Android.mk	libsepol, secilc: Fix build for Android	2015-04-02 12:01:10 -04:00
ChangeLog	Update checkpolicy and libsepol ChangeLogs.	2015-06-15 09:23:20 -04:00
COPYING	initial import from svn trunk revision 2950	2008-08-19 15:30:36 -04:00
Makefile	libsepol: build cil into libsepol	2014-08-26 08:03:31 -04:00
VERSION	Bump to final release	2015-02-02 09:38:10 -05:00