Re: [PATCH v2] libsepol: fix checkpolicy dontaudit compiler bug

2016-11-15 Thread Stephen Smalley
gt;>> >>>> >>>>> -Original Message- >>>>> From: Selinux [mailto:selinux-boun...@tycho.nsa.gov] On Behalf Of >>>>> Roberts, >>>>> William C >>>>> Sent: Monday, November 14, 2016 10:44 AM >>>&

Re: [PATCH v2] libsepol: fix checkpolicy dontaudit compiler bug

2016-11-15 Thread William Roberts
16 02:41 PM, Roberts, William C wrote: > >> > > >> > > >> >> -Original Message- > >> >> From: Selinux [mailto:selinux-boun...@tycho.nsa.gov] On Behalf Of > >> >> Roberts, > >> >> William C

Re: [PATCH v2] libsepol: fix checkpolicy dontaudit compiler bug

2016-11-15 Thread William Roberts
;> William C > >> Sent: Monday, November 14, 2016 10:44 AM > >> To: Stephen Smalley <s...@tycho.nsa.gov>; selinux@tycho.nsa.gov > >> Subject: RE: [PATCH v2] libsepol: fix checkpolicy dontaudit compiler bug > >> > >> > >> > >>> -O

Re: [PATCH v2] libsepol: fix checkpolicy dontaudit compiler bug

2016-11-15 Thread Stephen Smalley
On 11/14/2016 06:58 PM, Nick Kralevich wrote: > On Mon, Nov 14, 2016 at 9:48 AM, Stephen Smalley wrote: >> The combining logic for dontaudit rules was wrong, causing >> a dontaudit A B:C *; rule to be clobbered by a dontaudit A B:C p; >> rule. >> >> Reported-by: Nick Kralevich

Re: [PATCH v2] libsepol: fix checkpolicy dontaudit compiler bug

2016-11-15 Thread Stephen Smalley
.gov>; selinux@tycho.nsa.gov >> Subject: RE: [PATCH v2] libsepol: fix checkpolicy dontaudit compiler bug >> >> >> >>> -Original Message- >>> From: Selinux [mailto:selinux-boun...@tycho.nsa.gov] On Behalf Of >>> Stephen Smalley >>

RE: [PATCH v2] libsepol: fix checkpolicy dontaudit compiler bug

2016-11-14 Thread Roberts, William C
> -Original Message- > From: Selinux [mailto:selinux-boun...@tycho.nsa.gov] On Behalf Of Roberts, > William C > Sent: Monday, November 14, 2016 10:44 AM > To: Stephen Smalley <s...@tycho.nsa.gov>; selinux@tycho.nsa.gov > Subject: RE: [PATCH v2] libsepol: f

RE: [PATCH v2] libsepol: fix checkpolicy dontaudit compiler bug

2016-11-14 Thread Roberts, William C
> -Original Message- > From: Selinux [mailto:selinux-boun...@tycho.nsa.gov] On Behalf Of Stephen > Smalley > Sent: Monday, November 14, 2016 9:48 AM > To: selinux@tycho.nsa.gov > Cc: Stephen Smalley > Subject: [PATCH v2] libsepol: fix checkpolicy dontaudit compiler