| commit | 77779d2ca5a0c6efd113ff34cee432d5bb951f09 | [log] [tgz] |
|---|---|---|
| author | Yuli Khodorkovskiy <ykhodorkovskiy@tresys.com> | Thu Sep 10 12:56:05 2015 -0400 |
| committer | James Carter <jwcart2@tycho.nsa.gov> | Fri Sep 11 09:07:46 2015 -0400 |
| tree | e90c00a759a49c14dea12f1fbef61fb256bc1708 | |
| parent | 8e74de5f8df92696822ee7aedd95f4a1e2107b16 [diff] |
libsepol/cil: Add userattribute{set} functionality
This adds a userattribute statement that may be used in userroles and
constraints. The syntax is the same as typeattributset.
Also, disallow roleattributes where roles are accepted in contexts.
Specify a userattribute
(userattribute foo)
Add users to the set foo
(userattributeset foo (u1 u2))
Signed-off-by: Yuli Khodorkovskiy <ykhodorkovskiy@tresys.com>
Signed-off-by: James Carter <jwcart2@tycho.nsa.gov>