From 36bf1be1cab5f1be258cd32882e85335b3301355 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Christian=20G=C3=B6ttsche?= <cgzones@googlemail.com>
Date: Wed, 29 Jun 2022 13:05:12 +0200
Subject: [PATCH] libsepol/utils: improve wording
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

A request is denied with SEPOL_COMPUTEAV_RBAC if the source role is not
allowed to transition to the target role, granted via a

    allow source_role target_role;

statement.

Signed-off-by: Christian Göttsche <cgzones@googlemail.com>
Acked-by: James Carter <jwcart2@gmail.com>
---
 libsepol/utils/sepol_check_access.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/libsepol/utils/sepol_check_access.c b/libsepol/utils/sepol_check_access.c
index bd2ea896..5d2bf679 100644
--- a/libsepol/utils/sepol_check_access.c
+++ b/libsepol/utils/sepol_check_access.c
@@ -109,7 +109,7 @@ int main(int argc, char *argv[])
 	if (reason & SEPOL_COMPUTEAV_RBAC) {
 		if (i > 0)
 			printf(", ");
-		printf("transition-constraint");
+		printf("role-transition");
 		i++;
 	}
 	if (reason & SEPOL_COMPUTEAV_BOUNDS) {