selinux/libsepol/src
Christian Göttsche fa936a0a30 libsepol: reject attributes in type av rules for kernel policies
The kernel does not support type attributes as source or target in type
av rules (type_transition, type_member, type_change)[1].  Such rules
should have been expanded[2].

[1]: abe3c63144/security/selinux/ss/services.c (L1843)
[2]: 0a8c177dac/libsepol/src/expand.c (L1981)

Signed-off-by: Christian Göttsche <cgzones@googlemail.com>
Acked-by: James Carter <jwcart2@gmail.com>
2023-01-11 08:43:09 -05:00
..
Makefile libsepol: use reallocarray wrapper to avoid overflows 2021-12-15 12:48:41 -05:00
assertion.c libsepol: Populate and use policy name 2022-02-24 10:44:46 -05:00
avrule_block.c
avtab.c libsepol: support const avtab_t pointer in avtab_map() 2022-08-09 09:52:34 -04:00
boolean_internal.h
boolean_record.c
booleans.c
conditional.c libsepol: Use calloc when initializing bool_val_to_struct array 2022-03-30 13:43:27 -04:00
constraint.c
context.c libsepol: introduce sepol_const_security_context_t typedef 2022-04-12 13:09:13 -04:00
context.h
context_internal.h
context_record.c libsepol: drop trailing newlines in log messages 2022-01-27 09:51:37 -05:00
debug.c
debug.h
ebitmap.c libsepol: skip superfluous memset calls in ebitmap operations 2022-08-09 09:52:28 -04:00
expand.c libsepol,checkpolicy: add support for self keyword in type transitions 2022-05-16 10:37:17 -04:00
flask.h
handle.c
handle.h
hashtab.c libsepol: Replace calls to mallocarray() with calls to calloc() 2022-04-12 13:09:22 -04:00
hierarchy.c libsepol: drop trailing newlines in log messages 2022-01-27 09:51:37 -05:00
ibendport_internal.h
ibendport_record.c
ibendports.c
ibpkey_internal.h
ibpkey_record.c
ibpkeys.c
iface_internal.h
iface_record.c
interfaces.c
kernel_to_cil.c libsepol: fix missing double quotes in typetransition CIL rule 2022-09-01 09:26:56 -04:00
kernel_to_common.c libsepol: mark immutable common helper parameter const 2022-04-06 10:46:11 +02:00
kernel_to_common.h libsepol: mark immutable common helper parameter const 2022-04-06 10:46:11 +02:00
kernel_to_conf.c libsepol: add missing oom checks 2022-04-06 10:45:21 +02:00
libsepol.map.in libsepol: export functions for policy analysis 2022-04-12 13:09:16 -04:00
libsepol.pc.in
link.c libsepol: refactor ebitmap conversion in link.c 2022-08-09 09:52:48 -04:00
mls.c libsepol: mark immutable mls and context parameter const 2022-04-06 10:46:10 +02:00
mls.h libsepol: include necessary headers in headers 2022-08-09 09:52:03 -04:00
module.c libsepol: Replace calls to mallocarray() with calls to calloc() 2022-04-12 13:09:22 -04:00
module_internal.h
module_to_cil.c libsepol: enclose macro parameters and replacement lists in parentheses 2022-08-09 09:52:06 -04:00
node_internal.h
node_record.c
nodes.c
optimize.c libsepol: Replace calls to mallocarray() with calls to calloc() 2022-04-12 13:09:22 -04:00
polcaps.c libsepol: Shorten the policy capability enum names 2022-03-11 10:16:15 -05:00
policydb.c libsepol: simplify string copying 2022-11-21 14:30:26 -05:00
policydb_convert.c
policydb_internal.h
policydb_public.c
policydb_validate.c libsepol: reject attributes in type av rules for kernel policies 2023-01-11 08:43:09 -05:00
policydb_validate.h libsepol: operate on const pointers during validation 2022-08-09 09:52:37 -04:00
port_internal.h
port_record.c
ports.c
private.h libsepol: Replace calls to mallocarray() with calls to calloc() 2022-04-12 13:09:22 -04:00
services.c libsepol: initialize s in constraint_expr_eval_reason 2022-07-06 15:57:18 -04:00
sidtab.c libsepol: Replace calls to mallocarray() with calls to calloc() 2022-04-12 13:09:22 -04:00
symtab.c
user_internal.h
user_record.c libsepol: Replace calls to mallocarray() with calls to calloc() 2022-04-12 13:09:22 -04:00
users.c libsepol: use reallocarray wrapper to avoid overflows 2021-12-15 12:48:41 -05:00
util.c libsepol: enclose macro parameters and replacement lists in parentheses 2022-08-09 09:52:06 -04:00
write.c libsepol: do not modify policy during write 2022-07-06 15:57:27 -04:00