James Carter d4d0955c67 libsepol: Write "NO_IDENTIFIER" for empty constraint expression ... If a role attribute with no roles associated with it is used in a constraint expression, then the role bitmap will be empty. This is not a problem for the kernel, but does cause problems when converting a kernel policy to policy.conf. When creating a policy.conf from a kernel policy, if an empty bitmap is encountered, use the string "NO_IDENTIFIER". An error will occur if an attempt is made to compile the resulting policy, but this is better than exiting with an error without creating a policy.conf. Signed-off-by: James Carter <jwcart2@gmail.com>		2021-03-18 10:07:04 -04:00
..
cil	libsepol/cil: do not leak avrulex_ioctl_table memory when an error occurs	2021-03-17 08:46:36 +01:00
include	libsepol: Create function ebitmap_highest_set_bit()	2021-02-19 16:30:11 +01:00
man	selinux: Update manpages after removing legacy boolean and user code	2019-07-29 23:46:47 +02:00
src	libsepol: Write "NO_IDENTIFIER" for empty constraint expression	2021-03-18 10:07:04 -04:00
tests	libsepol/tests: drop ncurses dependency	2020-05-04 10:31:44 +02:00
utils	libsepol: build: follow standard semantics for DESTDIR and PREFIX	2018-02-14 15:59:36 +01:00
.gitignore	libsepol: build cil into libsepol	2014-08-26 08:03:31 -04:00
COPYING	initial import from svn trunk revision 2950	2008-08-19 15:30:36 -04:00
Makefile	libsepol: build cil into libsepol	2014-08-26 08:03:31 -04:00
VERSION	Update VERSIONs to 3.2 for release.	2021-03-04 16:42:59 +01:00