From f3b0b0837f65bd1585a4559229db1edbb54943ef Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Christian=20G=C3=B6ttsche?= <cgzones@googlemail.com>
Date: Tue, 22 Mar 2022 18:05:40 +0100
Subject: [PATCH] policy.dtd: more strict bool/tunable and infoflow validation
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Booleans and tunables must have a value of true or false and infoflow
needs to be of type read, write, none or both with a weight of 1 to 10.

Signed-off-by: Christian Göttsche <cgzones@googlemail.com>
---
 doc/policy.dtd | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/doc/policy.dtd b/doc/policy.dtd
index 528298541..c36cb846a 100644
--- a/doc/policy.dtd
+++ b/doc/policy.dtd
@@ -14,11 +14,11 @@
 <!ELEMENT tunable (desc)>
 <!ATTLIST tunable
       name CDATA #REQUIRED
-      dftval CDATA #REQUIRED>
+      dftval (true|false) #REQUIRED>
 <!ELEMENT bool (desc)>
 <!ATTLIST bool
       name CDATA #REQUIRED
-      dftval CDATA #REQUIRED>
+      dftval (true|false) #REQUIRED>
 <!ELEMENT summary (#PCDATA)>
 <!ELEMENT interface (summary,desc?,param+,infoflow?,(rolebase|rolecap)?)>
 <!ATTLIST interface name CDATA #REQUIRED lineno CDATA #REQUIRED>
@@ -32,8 +32,8 @@
       unused (true|false) "false">
 <!ELEMENT infoflow EMPTY>
 <!ATTLIST infoflow
-      type CDATA #REQUIRED
-      weight CDATA #IMPLIED>
+      type (read|write|none|both) #REQUIRED
+      weight (1|2|3|4|5|6|7|8|9|10) #IMPLIED>
 <!ELEMENT rolebase EMPTY>
 <!ELEMENT rolecap EMPTY>