Skip to content

Fix some cil_gen_policy() bugs.

Daniel Cashman selinux 1 version In review

Get series with b4
b4 am [email protected]

Versions newest first

  1. v1 Latest5 patches 4 repliesIn review

Patches in v1 No applies recorded yet

#Subject and filesSizeRepliesApplied
1/5libsepol: cil: Add userrole mapping to cil_gen_policy().libsepol/cil/src/cil_policy.c+6 -10 replies
2/5libsepol: cil: Remove duplicate sid policy declaration.libsepol/cil/src/cil_policy.c+0 -40 replies
3/5libsepol: cil: Replace sensitivityorder statement.libsepol/cil/src/cil_policy.c+5 -20 replies
4/5libsepol: cil: Fix CIL_OP data assignment.libsepol/cil/src/cil_policy.c+3 -30 replies
5/5libsepol: cil: Add cil_constraint_expr_to_policy()libsepol/cil/src/cil_policy.c+210 -10 replies

Reviews trailers per patch

No Reviewed-by, Acked-by or Tested-by trailers for v1 yet.

Read the v1 thread

Cover letter [PATCH 0/5] Fix some cil_gen_policy() bugs.

From: dcashman <[email protected]>

cil_gen_policy() appears to exist to generate a policy.conf corresponding to the original SELinux HLL from a cil_db struct. All of libsepol/cil/src/cil_policy.c appears to exist to support this functionality. This patchset provides some fixes for issues encountered when trying to go from android's policy.conf to a CIL representation (via checkpolicy) and then back to the HLL representation via cil_gen_policy().

dcashman (5):
libsepol: cil: Add userrole mapping to cil_gen_policy().
libsepol: cil: Remove duplicate sid policy declaration.
libsepol: cil: Replace sensitivityorder statement.
libsepol: cil: Fix CIL_OP data assignment.
libsepol: cil: Add cil_constraint_expr_to_policy()

 libsepol/cil/src/cil_policy.c | 235 ++++++++++++++++++++++++++++++++++++++++--
 1 file changed, 224 insertions(+), 11 deletions(-)
Signature · 1 line
2.8.0.rc3.226.g39d4020