selinux/checkpolicy/test
Jeff Vander Stoep 99fc177b5a Add neverallow support for ioctl extended permissions
Neverallow rules for ioctl extended permissions will pass in two
cases:
1. If extended permissions exist for the source-target-class set
   the test will pass if the neverallow values are excluded.
2. If extended permissions do not exist for the source-target-class
   set the test will pass if the ioctl permission is not granted.

Signed-off-by: Jeff Vander Stoep <jeffv@google.com>
Acked-by:  Nick Kralevich <nnk@google.com>
Acked-by:  Stephen Smalley <sds@tycho.nsa.gov>
2015-09-22 10:52:47 -04:00
..
.gitignore Repo: update .gitignore 2011-08-02 13:31:51 -04:00
Makefile dismod and dispol do not use libselinux. 2014-02-20 14:19:50 -05:00
dismod.c checkpolicy: fgets function warnings fix for dismod and dispol 2015-02-26 15:00:27 -05:00
dispol.c Add neverallow support for ioctl extended permissions 2015-09-22 10:52:47 -04:00