Christian Göttsche 42d653aae5 checkpolicy: drop host bits in IPv6 CIDR address ... Drop the host bits in the IPV6 address defined via a CIDR notation in define_ipv6_cidr_node_context(), similar to define_ipv4_cidr_node_context(). Otherwise the kernel will never match this entry since the host bits from the actual address will be zeroed before comparison, see security/selinux/ss/services.c:match_ipv6_addrmask(). Signed-off-by: Christian Göttsche <cgzones@googlemail.com> Acked-by: James Carter <jwcart2@gmail.com>		2024-12-04 08:56:16 -05:00
..
fuzz	checkpolicy/fuzz: fix setjmp condition	2024-10-30 08:04:38 -04:00
test	libsepol: Support nlmsg extended permissions	2024-09-04 16:54:26 -04:00
tests	checkpolicy: drop host bits in IPv6 CIDR address	2024-12-04 08:56:16 -05:00
.gitignore	checkpolicy: add round-trip tests	2023-11-07 16:27:26 -05:00
checkmodule.8	checkpolicy,libselinux,libsepol,policycoreutils,semodule-utils: update my email	2023-08-04 13:57:01 -04:00
checkmodule.c	checkpolicy: drop global policyvers variable	2024-05-01 16:48:25 -04:00
checkpolicy.8	checkpolicy,libselinux,libsepol,policycoreutils,semodule-utils: update my email	2023-08-04 13:57:01 -04:00
checkpolicy.c	checkpolicy: drop global policyvers variable	2024-05-01 16:48:25 -04:00
LICENSE	docs: provide a top level LICENSE file	2022-10-05 08:20:38 -04:00
Makefile	checkpolicy: add libfuzz based fuzzer	2024-03-04 09:54:47 -05:00
module_compiler.c	checkpolicy: avoid memory leaks on redeclarations	2024-11-15 13:59:07 -05:00
module_compiler.h	checkpolicy: avoid memory leaks on redeclarations	2024-11-15 13:59:07 -05:00
parse_util.c	checkpolicy: cleanup resources on parse error	2024-03-04 09:54:52 -05:00
parse_util.h	initial import from svn trunk revision 2950	2008-08-19 15:30:36 -04:00
policy_define.c	checkpolicy: drop host bits in IPv6 CIDR address	2024-12-04 08:56:16 -05:00
policy_define.h	checkpolicy: add support for xperms in conditional policies	2024-11-15 13:59:07 -05:00
policy_parse.y	checkpolicy: add support for xperms in conditional policies	2024-11-15 13:59:07 -05:00
policy_scan.l	checkpolicy: support CIDR notation for nodecon statements	2024-05-24 08:46:34 -04:00
queue.c	checkpolicy,libselinux,libsepol,policycoreutils,semodule-utils: update my email	2023-08-04 13:57:01 -04:00
queue.h	checkpolicy,libselinux,libsepol,policycoreutils,semodule-utils: update my email	2023-08-04 13:57:01 -04:00
VERSION	Update VERSIONs to 3.8-rc1 for release.	2024-11-27 18:07:02 +01:00