Chris PeBenito
06335957b7
Disable/remove neverallow options in frontends.
...
These rules are not available in the binary policy. Keep library support in
case this changes in the future.
Signed-off-by: Chris PeBenito <chpebeni@linux.microsoft.com>
2023-04-03 10:26:49 -04:00
Daniel Burgener
af077513fc
Add -Sp argument to sesearch to serve as front end for perms_subset
...
The perms_subset rule search flag matches rules where the searched perms
are a subset of the rule perms. This flag is currently only exposed via
apol, and this commit exposes it via sesearch
Signed-off-by: Daniel Burgener <dburgener@linux.microsoft.com>
2022-03-18 16:57:45 -04:00
Daniel Burgener
2ca75dfb02
Update text of man page for -ep flag
...
The old text does not match the behavior observed in practice or the
description in the --help flag
Signed-off-by: Daniel Burgener <dburgener@linux.microsoft.com>
2022-03-18 15:14:43 -04:00
Chris PeBenito
c852d5b6cb
sechecker.1: Minor revisions to TE rule assertion.
...
Add text for expected rules and note that setting expect is optional.
Signed-off-by: Chris PeBenito <pebenito@ieee.org>
2020-08-23 11:19:29 -04:00
Chris PeBenito
83f91adb2c
checker: Implement RBAC rule assertion check.
...
Signed-off-by: Chris PeBenito <pebenito@ieee.org>
2020-08-23 11:18:46 -04:00
Chris PeBenito
a107811abb
AssertTE: Add expect_source and expect_target options.
...
This is used to assert the existence of TE rules.
Signed-off-by: Chris PeBenito <pebenito@ieee.org>
2020-07-25 15:19:12 -04:00
Chris PeBenito
df5bf03d20
checker/util: Change lists from comma-separated to space-separated.
...
Signed-off-by: Chris PeBenito <pebenito@ieee.org>
2020-07-25 10:47:58 -04:00
Chris PeBenito
b58fdc00cd
sechecker: Implement sechecker.
...
This is a command line tool for the configuration file-driven automated
policy analysis.
Signed-off-by: Chris PeBenito <chpebeni@linux.microsoft.com>
2020-06-10 11:09:37 -04:00
Chris PeBenito
ba305bfd74
Remove source policy references from man pages.
...
Signed-off-by: Chris PeBenito <pebenito@ieee.org>
2019-05-18 08:33:36 -04:00
Aleksei Nikiforov
99d83b7430
Add man pages translation by Olesya Gerasimenko
2019-01-09 12:43:25 +03:00
Chris PeBenito
2496ae0509
Update old documentation references.
...
Closes #12
2018-11-12 11:40:22 -05:00
Chris PeBenito
7fdff6941b
Man page revisions.
...
* Add in missing xperm rule options.
* Fix copy-paste error in sesearch option descriptions
Closes #118
2016-04-19 09:22:19 -04:00
Chris PeBenito
1bd80d6356
Add man pages.
...
Closes #95
2016-02-21 16:27:44 -05:00
