mirror of
https://github.com/SELinuxProject/selinux
synced 2024-12-19 20:50:08 +00:00
4a60fd78d2
CIL has rules that allow names to be assigned to certain objects like MLS category sets, MLS levels, MLS ranges, IP addresses, and class permission sets. These objects can also be named as parameters for a macro. A call may pass in a name for one of these objects, but it also may pass in one of the actual objects. These objects are referred as anonymous arguments. Add CIL policy that can be used to test whether or not anonymous arguments are being handled properly in macros. Also test the equivalent named arguments to help determine if the problem is with that argument type or just with an anonymous argument of that type. The anonymouse arguments that are tested are categoryset, level, levelrange, ipaddr, and classpermission. Signed-off-by: James Carter <jwcart2@gmail.com> Acked-by: Nicolas Iooss <nicolas.iooss@m4x.org> |
||
|---|---|---|
| .. | ||
| anonymous_arg_test.cil | ||
| block_test.cil | ||
| bounds.cil | ||
| in_test.cil | ||
| integration.cil | ||
| minimum.cil | ||
| name_resolution_test.cil | ||
| neverallow.cil | ||
| opt-expected.cil | ||
| opt-input.cil | ||
| optional_test.cil | ||
| policy.cil | ||