Jeff Vander Stoep 99fc177b5a Add neverallow support for ioctl extended permissions ... Neverallow rules for ioctl extended permissions will pass in two cases: 1. If extended permissions exist for the source-target-class set the test will pass if the neverallow values are excluded. 2. If extended permissions do not exist for the source-target-class set the test will pass if the ioctl permission is not granted. Signed-off-by: Jeff Vander Stoep <jeffv@google.com> Acked-by: Nick Kralevich <nnk@google.com> Acked-by: Stephen Smalley <sds@tycho.nsa.gov>		2015-09-22 10:52:47 -04:00
..
.gitignore	Repo: update .gitignore	2011-08-02 13:31:51 -04:00
dismod.c	checkpolicy: fgets function warnings fix for dismod and dispol	2015-02-26 15:00:27 -05:00
dispol.c	Add neverallow support for ioctl extended permissions	2015-09-22 10:52:47 -04:00
Makefile	dismod and dispol do not use libselinux.	2014-02-20 14:19:50 -05:00