| commit | f9bdf580b8a5cb19a08f52ed740b603612e41b01 | [log] [tgz] |
|---|---|---|
| author | James Carter <jwcart2@tycho.nsa.gov> | Wed Jun 10 15:31:31 2015 -0400 |
| committer | James Carter <jwcart2@tycho.nsa.gov> | Mon Jun 22 10:03:07 2015 -0400 |
| tree | 3d85d2364cbf3386951104b0b26f7c2fd179dc2e | |
| parent | 798faf12274dacf6165a7e25ad933abb0e98efc5 [diff] |
libsepol/cil: Add function to search the CIL AST for an AV rule. The search will be considered a success if any rule is found that at least partially matches all parts (src type, tgt type, and class- perms) of the target rule. For example, for a target of (allow domain file_type (file (read write) the rule (allow init_t init_exec_t (file (read exec)) will match. Signed-off-by: James Carter <jwcart2@tycho.nsa.gov>