Go to file
Yuli Khodorkovskiy 0a71540723 policycoreutils/hll/pp: change printing behavior of typeattribute/sets
Avrules that have the negation, star, or complement flag set for types
need typeattributes and typeattributesets that are generated. This caused
issues when these generated statements were inserted into conditionals, since
typeattributes/sets are not allowed in conditionals.

This change always prints typeattributes and typeattributesets
immediately unless the types appear inside of an avrule in conditionals or blocks.
For this special case, we print the typeattributes after the end
of each conditional/block.

Signed-off-by: Yuli Khodorkovskiy <ykhodorkovskiy@tresys.com>
Acked-by: Steve Lawrence <slawrence@tresys.com>
2014-10-02 09:57:08 -04:00
checkpolicy Add missing semicolon to parser rule "cond_else" 2014-10-02 09:56:54 -04:00
libselinux libselinux: fix gcc -Wsign-compare warnings 2014-10-02 09:56:11 -04:00
libsemanage Fix gcc -Wstrict-prototypes warnings 2014-10-02 09:56:38 -04:00
libsepol libsepol/tests: fix gcc -Warray-bounds warning 2014-10-02 09:56:45 -04:00
policycoreutils policycoreutils/hll/pp: change printing behavior of typeattribute/sets 2014-10-02 09:57:08 -04:00
scripts Update release script for github 2014-08-27 11:47:04 -04:00
sepolgen Use $(PYTHON) instead of "python" in every Makefile 2014-10-02 09:56:49 -04:00
.gitignore global: gitignore: add a couple of more editor backup filetypes 2013-02-01 12:14:57 -05:00
Makefile libselinux: additional makefile support for rubywrap 2012-06-28 11:21:16 -04:00
README Adjust build instructions to clarify x86_64 vs x86. 2013-10-30 12:51:19 -04:00

To build and install everything under a private directory, run:
make DESTDIR=~/obj install install-pywrap

To install as the default system libraries and binaries
(overwriting any previously installed ones - dangerous!),
on x86_64, run:
make LIBDIR=/usr/lib64 SHLIBDIR=/lib64 install install-pywrap relabel
or on x86 (32-bit), run:
make install install-pywrap relabel

This may render your system unusable if the upstream SELinux userspace
lacks library functions or other dependencies relied upon by your
distribution.  If it breaks, you get to keep both pieces.