mirror of
https://github.com/SELinuxProject/selinux
synced 2024-12-25 23:42:05 +00:00
04c42b9d70
Type transition file names are stored in a symbol table. Before the name is added, the symbol table is searched to see if the name had already been inserted. If it has, then the already existing datum is returned. If it has not, then the name is added if either the typetransition rule does not occur in a macro or the name is not one of the macro parameters. Checking for a previous insertion before checking if the name is a macro parameter can cause a macro parameter to be treated as the actual name if a previous type transition file name is the same as the parameter. Now check the name to see if it a macro paramter before checking for its existence in the symbol table. Signed-off-by: James Carter <jwcart2@gmail.com> Acked-by: Ondrej Mosnacek <omosnace@redhat.com> |
||
---|---|---|
.circleci | ||
checkpolicy | ||
dbus | ||
gui | ||
libselinux | ||
libsemanage | ||
libsepol | ||
mcstrans | ||
policycoreutils | ||
python | ||
restorecond | ||
sandbox | ||
scripts | ||
secilc | ||
semodule-utils | ||
.gitignore | ||
.travis.yml | ||
CleanSpec.mk | ||
CONTRIBUTING.md | ||
lgtm.yml | ||
Makefile | ||
README |
Please submit all bug reports and patches to selinux@vger.kernel.org. Subscribe by sending "subscribe selinux" in the body of an email to majordomo@vger.kernel.org. Build dependencies on Fedora: yum install audit-libs-devel bison bzip2-devel dbus-devel dbus-glib-devel flex flex-devel flex-static glib2-devel libcap-devel libcap-ng-devel pam-devel pcre-devel python3-devel python3-setools swig xmlto redhat-rpm-config To build and install everything under a private directory, run: make DESTDIR=~/obj install install-pywrap To install as the default system libraries and binaries (overwriting any previously installed ones - dangerous!), on x86_64, run: make LIBDIR=/usr/lib64 SHLIBDIR=/lib64 install install-pywrap relabel or on x86 (32-bit), run: make install install-pywrap relabel This may render your system unusable if the upstream SELinux userspace lacks library functions or other dependencies relied upon by your distribution. If it breaks, you get to keep both pieces. To install libsepol on macOS (mainly for policy analysis): cd libsepol; make PREFIX=/usr/local install This requires GNU coreutils (brew install coreutils).