| commit | be96f05182ffd934eb20776c52a88df6e51fe6df | [log] [tgz] |
|---|---|---|
| author | William Roberts <william.c.roberts@intel.com> | Tue Nov 15 16:42:23 2016 -0800 |
| committer | Stephen Smalley <sds@tycho.nsa.gov> | Wed Nov 16 08:50:03 2016 -0500 |
| tree | 17217585914e3023eada49d7ad99bf778295a290 | |
| parent | 5862ac5dfe3bcfc5ff1aa40b5585899b993ae446 [diff] |
libsepol: fix checkpolicy dontaudit compiler bug
The combining logic for dontaudit rules was wrong, causing
a dontaudit A B:C *; rule to be clobbered by a dontaudit A B:C p;
rule.
This is a reimplementation of:
commit 6201bb5e258e2b5bcc04d502d6fbc05c69d21d71 ("libsepol:
fix checkpolicy dontaudit compiler bug")
that avoids the cumbersome pointer assignments on alloced.
Reported-by: Nick Kralevich <nnk@google.com>
Signed-off-by: William Roberts <william.c.roberts@intel.com>