Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Disjoint Attributes Rule #359

Open
wants to merge 6 commits into
base: main
Choose a base branch
from
Open

Disjoint Attributes Rule #359

Changes from 1 commit
Commits
Show all changes
6 commits
Select commit Hold shift + click to select a range
e46d08f
libsepol: add ebitmap iterator wrapper with startnode
cgzones Jun 16, 2022
054e921
libsepol: add compile-time constraint for mutual exclusive attributes
cgzones Jun 16, 2022
b26a942
checkpolicy: add front-end support for disjoint attributes
cgzones Jun 16, 2022
fbf66c0
libsepol/tests: add test for disjoint attributes
cgzones Jun 29, 2022
d9a1b82
libsepol/cil: add support for segregate attributes
cgzones Jul 21, 2022
63e6cee
secilc/test: add disjoint attributes rule
cgzones Jul 21, 2022
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Jump to
Jump to file
Failed to load files.
Diff view
Diff view
Prev Previous commit
secilc/test: add disjoint attributes rule 
Signed-off-by: Christian Göttsche <[email protected]>
---
v4:
   rename to disjointattributes
  • Loading branch information
@cgzones
cgzones committed Apr 29, 2024
commit 63e6cee90c58b3b60749c8e783eb06f98b622c22
4 changes: 4 additions & 0 deletions secilc/test/policy.cil
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -118,13 +118,17 @@
(typeattribute foo_type)
(typeattribute bar_type)
(typeattribute baz_type)
(typeattribute bad_type)
(typeattribute not_bad_type)
(typeattribute empty_type)
(typeattributeset exec_type (or bin_t kernel_t))
(typeattributeset foo_type (and exec_type kernel_t))
(typeattributeset bar_type (xor exec_type foo_type))
(typeattributeset baz_type (not bin_t))
(typeattributeset baz_type (and exec_type (and bar_type bin_t)))
(typeattributeset bad_type (bad_t))
(typeattributeset not_bad_type (not bad_t))
(disjointattributes (bad_type not_bad_type empty_type))
(typealias sbin_t)
(typealiasactual sbin_t bin_t)
(typepermissive device_t)
Expand Down