selinux/checkpolicy/tests
Christian Göttsche 42d653aae5 checkpolicy: drop host bits in IPv6 CIDR address
Drop the host bits in the IPV6 address defined via a CIDR notation in
define_ipv6_cidr_node_context(), similar to
define_ipv4_cidr_node_context().  Otherwise the kernel will never match
this entry since the host bits from the actual address will be zeroed
before comparison, see
security/selinux/ss/services.c:match_ipv6_addrmask().

Signed-off-by: Christian Göttsche <cgzones@googlemail.com>
Acked-by: James Carter <jwcart2@gmail.com>
2024-12-04 08:56:16 -05:00
..
policy_allonce_mls.conf checkpolicy: add round-trip tests 2023-11-07 16:27:26 -05:00
policy_allonce_mls.expected_opt.conf checkpolicy: add round-trip tests 2023-11-07 16:27:26 -05:00
policy_allonce_mls.expected.conf checkpolicy: add round-trip tests 2023-11-07 16:27:26 -05:00
policy_allonce_xen.conf checkpolicy: add round-trip tests 2023-11-07 16:27:26 -05:00
policy_allonce_xen.expected_opt.conf checkpolicy: add round-trip tests 2023-11-07 16:27:26 -05:00
policy_allonce_xen.expected.conf checkpolicy: add round-trip tests 2023-11-07 16:27:26 -05:00
policy_allonce.conf checkpolicy: drop host bits in IPv6 CIDR address 2024-12-04 08:56:16 -05:00
policy_allonce.expected_opt.conf checkpolicy: drop host bits in IPv6 CIDR address 2024-12-04 08:56:16 -05:00
policy_allonce.expected.conf checkpolicy: drop host bits in IPv6 CIDR address 2024-12-04 08:56:16 -05:00
policy_minimal_mls.conf checkpolicy: add round-trip tests 2023-11-07 16:27:26 -05:00
policy_minimal.conf checkpolicy: add round-trip tests 2023-11-07 16:27:26 -05:00
test_roundtrip.sh checkpolicy: add round-trip tests 2023-11-07 16:27:26 -05:00