No description
Find a file
Harry Ciao 80f26c5ee8 checkpolicy: Separate tunable from boolean during compile.
Both boolean and tunable keywords are processed by define_bool_tunable(),
argument 0 and 1 would be passed for boolean and tunable respectively.
For tunable, a TUNABLE flag would be set in cond_bool_datum_t.flags.

Note, when creating an if-else conditional we can not know if the
tunable identifier is indeed a tunable(for example, a boolean may be
misused in tunable_policy() or vice versa), thus the TUNABLE flag
for cond_node_t would be calculated and used in expansion when all
booleans/tunables copied during link.

Signed-off-by: Harry Ciao <qingtao.cao@windriver.com>
Signed-off-by: Eric Paris <eparis@redhat.com>
Acked-by: Dan Walsh <dwalsh@redhat.com>
2011-09-16 11:54:01 -04:00
checkpolicy checkpolicy: Separate tunable from boolean during compile. 2011-09-16 11:54:01 -04:00
libselinux update changelog and versions for 2011-08-26 2011-08-26 15:11:58 -04:00
libsemanage libsemanage: change module disabled from rename to symlink 2011-09-15 17:17:48 -04:00
libsepol checkpolicy: Separate tunable from boolean during compile. 2011-09-16 11:54:01 -04:00
policycoreutils policycoreutils: sandbox: cntrl-c should kill entire process control group 2011-09-16 11:54:00 -04:00
scripts release script 2009-03-12 01:23:32 -04:00
sepolgen sepolgen: look for booleans that might solve problems 2011-09-16 11:54:00 -04:00
.gitignore Repo: update .gitignore 2011-08-02 13:31:51 -04:00
Makefile global: Makefile: create global 'all' target 2011-08-26 14:27:57 -04:00