mirror of
https://github.com/SELinuxProject/selinux
synced 2025-01-21 04:50:44 +00:00
dc676ab126
The nodecon statement requires that the IP address and mask values be enclosed in parentheses so that these values can be distinguished from named IP addresses. But since an identifier in CIL cannot start with a number or contain colons, the parentheses are not really required. Allow IP address and mask values to be written directly and do not require (but still allow) parentheses around them. Distinguish between an address or mask and an identifier by checking if the first character is a number or if the string contains a colon. Both of these are now valid: (nodecon (10.0.0.1) (255.255.255.0) (USER ROLE TYPE ((SENS) (SENS)))) (nodecon 10.0.0.1 255.255.255.0 (USER ROLE TYPE ((SENS) (SENS)))) Signed-off-by: James Carter <jwcart2@gmail.com> |
||
|---|---|---|
| .. | ||
| cil | ||
| fuzz | ||
| include | ||
| man | ||
| src | ||
| tests | ||
| utils | ||
| .gitignore | ||
| LICENSE | ||
| Makefile | ||
| VERSION | ||