From e9fb71f05dbbd91330c886fc18d6eb0fcef3941b Mon Sep 17 00:00:00 2001 From: James Carter Date: Wed, 27 Sep 2023 10:47:52 -0400 Subject: [PATCH] secilc/docs: Fix and update the documentation for macro parameters Remove references to "typealias", "categoryalias", and sensitivityalias" as valid parameter kinds, because they are not. Add "string" as a valid parameter kind. Add a note that "categoryset", "level", "levelrange", "classpermission", and "ipaddr" can be named or anonymous. Add a note that "type", "role", and "user" can be used for attributes. Add a note that "type", "sensitivity" and "category" can be used for aliases. Add a note that "string" and "name" can be used for filenames in typetransition rules and paths in filecon rules. Signed-off-by: James Carter --- secilc/docs/cil_call_macro_statements.md | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/secilc/docs/cil_call_macro_statements.md b/secilc/docs/cil_call_macro_statements.md index dcc6139f..adbfef4b 100644 --- a/secilc/docs/cil_call_macro_statements.md +++ b/secilc/docs/cil_call_macro_statements.md @@ -90,7 +90,11 @@ Duplicate [`macro`](cil_call_macro_statements.md#macro) declarations in the same

param_type

Zero or more parameters that are passed to the macro. The param_type is a keyword used to determine the declaration type (e.g. type, class, categoryset).

-

The list of valid param_type entries are: type, typealias, role, user, sensitivity, sensitivityalias, category, categoryalias, categoryset (named or anonymous), level (named or anonymous), levelrange (named or anonymous), class, classpermission (named or anonymous), ipaddr (named or anonymous), name (a string), classmap

+

The list of valid param_type entries are: string, name, type, role, user, sensitivity, category, bool, categoryset, level, levelrange, ipaddr, class, classmap, and classpermission. +

The param_types categoryset, level, levelrange, classpermission, and ipaddr can by named or anonymous.

+

The param_types type, role, and user can be used for attributes.

+

The param_types type, sensitivity and category can be used for aliases.

+

The param_types name and string can be used interchangeably for an object_name in [`typetransition`](cil_type_statements.md#typetransition) and the path in [`filecon`](cil_file_labeling_statements.md#filecon) statements.

param_id