selinux/secilc/test
Yuli Khodorkovskiy 77779d2ca5 libsepol/cil: Add userattribute{set} functionality
This adds a userattribute statement that may be used in userroles and
constraints. The syntax is the same as typeattributset.

Also, disallow roleattributes where roles are accepted in contexts.

Specify a userattribute

    (userattribute foo)

Add users to the set foo

    (userattributeset foo (u1 u2))

Signed-off-by: Yuli Khodorkovskiy <ykhodorkovskiy@tresys.com>
Signed-off-by: James Carter <jwcart2@tycho.nsa.gov>
2015-09-11 09:07:46 -04:00
..
block_test.cil libsepol: Move secilc out of libsepol 2015-03-31 12:31:38 -04:00
bounds.cil secilc: Add a CIL policy file to test bounds checking. 2015-06-22 10:03:16 -04:00
in_test.cil libsepol: Move secilc out of libsepol 2015-03-31 12:31:38 -04:00
integration.cil libsepol: Move secilc out of libsepol 2015-03-31 12:31:38 -04:00
minimum.cil libsepol: Move secilc out of libsepol 2015-03-31 12:31:38 -04:00
name_resolution_test.cil libsepol: Move secilc out of libsepol 2015-03-31 12:31:38 -04:00
neverallow.cil secilc: Add a CIL policy file to test neverallow checking. 2015-06-22 10:03:16 -04:00
optional_test.cil libsepol: Move secilc out of libsepol 2015-03-31 12:31:38 -04:00
policy.cil libsepol/cil: Add userattribute{set} functionality 2015-09-11 09:07:46 -04:00