Harry Ciao 9f709e6bab libsepol: Preserve tunables when required by semodule program. ... If the "-P/--preserve_tunables" option is set for the semodule program, the preserve_tunables flag in sepol_handle_t would be set, then all tunables would be treated as booleans by having their TUNABLE flag bit cleared, resulting in all tunables if-else conditionals preserved for raw policy. Note, such option would invalidate the logic to double-check if tunables ever mix with booleans in one expression, so skip the call to assert() when this option is passed. Signed-off-by: Harry Ciao <qingtao.cao@windriver.com> Signed-off-by: Eric Paris <eparis@redhat.com> Acked-by: Dan Walsh <dwalsh@redhat.com>		2011-09-16 11:54:02 -04:00
checkpolicy	checkpolicy: Separate tunable from boolean during compile.	2011-09-16 11:54:01 -04:00
libselinux	update changelog and versions for 2011-08-26	2011-08-26 15:11:58 -04:00
libsemanage	libsepol: libsemanage: policycoreutils: Create a new preserve_tunables flag in sepol_handle_t.	2011-09-16 11:54:02 -04:00
libsepol	libsepol: Preserve tunables when required by semodule program.	2011-09-16 11:54:02 -04:00
policycoreutils	libsepol: libsemanage: policycoreutils: Create a new preserve_tunables flag in sepol_handle_t.	2011-09-16 11:54:02 -04:00
scripts	release script	2009-03-12 01:23:32 -04:00
sepolgen	sepolgen: look for booleans that might solve problems	2011-09-16 11:54:00 -04:00
.gitignore	Repo: update .gitignore	2011-08-02 13:31:51 -04:00
Makefile	global: Makefile: create global 'all' target	2011-08-26 14:27:57 -04:00