Jeff Vander Stoep 99fc177b5a Add neverallow support for ioctl extended permissions ... Neverallow rules for ioctl extended permissions will pass in two cases: 1. If extended permissions exist for the source-target-class set the test will pass if the neverallow values are excluded. 2. If extended permissions do not exist for the source-target-class set the test will pass if the ioctl permission is not granted. Signed-off-by: Jeff Vander Stoep <jeffv@google.com> Acked-by: Nick Kralevich <nnk@google.com> Acked-by: Stephen Smalley <sds@tycho.nsa.gov>		2015-09-22 10:52:47 -04:00
..
sepol	Add neverallow support for ioctl extended permissions	2015-09-22 10:52:47 -04:00
Makefile	libsepol: build cil into libsepol	2014-08-26 08:03:31 -04:00