Re: [PATCH] libsepol: Fully expand neverallowxperm rules

2015-11-24 Thread Stephen Smalley
On 11/21/2015 11:26 AM, Richard Haines wrote: Currently neverallowxperm rules will be resolved correctly when building policy, however they are not detectable when using tools such as an updated version of setools. This patch will allow these to be viewed in the same way as neverallow rules are i

[PATCH] libsepol: Fully expand neverallowxperm rules

2015-11-21 Thread Richard Haines
Currently neverallowxperm rules will be resolved correctly when building policy, however they are not detectable when using tools such as an updated version of setools. This patch will allow these to be viewed in the same way as neverallow rules are in a text based kernel policy file (e.g. policy.c