selinux

mirror of https://github.com/topjohnwu/selinux.git synced 2025-02-04 18:27:27 +00:00

History

Harry Ciao ad5951fcb1 libsepol: Permanently discard disabled branches of tunables in expansion.

For a cond_node_t in one decl->cond_list queue, append its
avtrue_list or avfalse_list to the avrules list of its home decl
depending on its state value, so that these effective rules would
be permanently added to te_avtab hashtab.

On the other hand, the rules on the disabled unused list won't be
expanded and written to the raw policy at all.

Signed-off-by: Harry Ciao <qingtao.cao@windriver.com>
Signed-off-by: Eric Paris <eparis@redhat.com>
Acked-by: Dan Walsh <dwalsh@redhat.com>

2011-09-16 11:54:01 -04:00

include

libsepol: Indicate when boolean is indeed a tunable.

2011-09-16 11:54:01 -04:00

man

initial import from svn trunk revision 2950

2008-08-19 15:30:36 -04:00

src

libsepol: Permanently discard disabled branches of tunables in expansion.

2011-09-16 11:54:01 -04:00

tests

reactivate attribute mapping unit test