Steve Lawrence f5602f5ff9 libsepol/cil: Add support for neverallowx ... Add a new statement, neverallowx, which has the same syntax as allowx: (neverallowx foo bar (ioctl file (range 0x2000 0x20FF))) (allowx foo bar (ioctl file (0x20A0))) ; this fails Much of the changes just move functions around or split functions up to ease the sharing of avrule and avrulex comparisons with neverallows. This refactoring also modifies the avrule struct to include a union of either class permission information for standard avrules or extended permission information for extended avrules, also done to support sharing code. This also changes assertion.c and avtab.c to allow check_assertion_avtab_match to work with extended avrules. Signed-off-by: Steve Lawrence <slawrence@tresys.com>		2015-12-02 15:15:03 -05:00
..
cil	libsepol/cil: Add support for neverallowx	2015-12-02 15:15:03 -05:00
include	Add neverallow support for ioctl extended permissions	2015-09-22 10:52:47 -04:00
man	Laurent Bigonville patch to fix various minor manpage issues and correct section numbering.	2013-10-24 13:58:37 -04:00
src	libsepol/cil: Add support for neverallowx	2015-12-02 15:15:03 -05:00
tests	libsepol/tests: fix gcc -Warray-bounds warning	2014-10-02 09:56:45 -04:00
utils	libsepol: Android/MacOS X build support	2012-06-28 11:21:15 -04:00
.gitignore	libsepol: build cil into libsepol	2014-08-26 08:03:31 -04:00
Android.mk	libsepol/cil: Add function to search the CIL AST for an AV rule.	2015-06-22 10:03:07 -04:00
ChangeLog	Update libsepol ChangeLog.	2015-11-24 16:36:44 -05:00
COPYING	initial import from svn trunk revision 2950	2008-08-19 15:30:36 -04:00
Makefile	libsepol: build cil into libsepol	2014-08-26 08:03:31 -04:00
VERSION	Bump to final release	2015-02-02 09:38:10 -05:00