selinux/libsepol/tests/policies/test-expander/base-base-only.conf
Stephen Smalley 8b71d70b55 Add separate role declarations as required by modern checkpolicy.
Sadly, make test still fails on some tests.

Signed-off-by: Stephen Smalley <sds@tycho.nsa.gov>
2013-10-25 12:08:23 -04:00

45 lines
467 B
Plaintext

class security
class file
sid kernel
common file
{
read
}
class file
inherits file
{
entrypoint
}
class security
{
compute_av
}
ifdef(`enable_mls',`
sensitivity s0;
dominance { s0 }
category c0;
level s0:c0;
mlsconstrain file { read }
( h1 dom h2 );
')
attribute myattr;
type mytype_t;
role myrole_r;
role myrole_r types mytype_t;
bool mybool true;
gen_user(myuser_u,, myrole_r, s0, s0 - s0:c0)
sid kernel gen_context(myuser_u:myrole_r:mytype_t, s0)