Christian Göttsche 413518a637 libsepol/cil: support IPv4/IPv6 address embedding ... Accept IPv4 addresses embedded in IPv6, like `::ffff:127.0.0.1`. This allows using those in nodecon statements leading to fine grained access control: type=AVC msg=audit(11/29/21 20:27:44.437:419) : avc: granted { node_bind } for pid=27500 comm=intercept saddr=::ffff:127.0.0.1 src=46293 scontext=xuser_u:xuser_r:xuser_t:s0 tcontext=system_u:object_r:lo_node_t:s0 tclass=tcp_socket This does effect policies in the traditional language due to CIL usage in semodule(8). Also print on conversion failures the address in question. Signed-off-by: Christian Göttsche <cgzones@googlemail.com>		2021-12-15 12:47:17 -05:00
..
include/cil	libsepol/cil: Provide option to allow qualified names in declarations	2021-07-03 16:00:26 +02:00
src	libsepol/cil: support IPv4/IPv6 address embedding	2021-12-15 12:47:17 -05:00
test
.gitignore