commit | 0ca5562e9782cd078030d486be9e8dc3190a8ccf | [log] [tgz] |
---|---|---|
author | Richard Haines <richard_c_haines@btinternet.com> | Sat Nov 21 16:26:48 2015 +0000 |
committer | Stephen Smalley <sds@tycho.nsa.gov> | Tue Nov 24 16:36:07 2015 -0500 |
tree | 0d26c9840fc2637a23a97b9f5c867c607f1e46fa | |
parent | 4a1169a3671dcea24b1713f7b711993547a42e8a [diff] |
libsepol: Fully expand neverallowxperm rules Currently neverallowxperm rules will be resolved correctly when building policy, however they are not detectable when using tools such as an updated version of setools. This patch will allow these to be viewed in the same way as neverallow rules are in a text based kernel policy file (e.g. policy.conf). Signed-off-by: Richard Haines <richard_c_haines@btinternet.com> Acked-by: Jeff Vander Stoep <jeffv@google.com>