"README" did not exist on "beefbe5c4de92dfeb8aca88929f8f1c69240da1b"

sgdisk.te

9 years ago

Replace "neverallow domain" by "neverallow *" · 35a14514

Nick Kralevich authored 9 years ago

Modify many "neverallow domain" rules to be "neverallow *" rules
instead. This will catch more SELinux policy bugs where a label
is assigned an irrelevant rule, as well as catch situations where
a domain attribute is not assigned to a process.

Change-Id: I5b83a2504c13b384f9dff616a70ca733b648ccdf

35a14514

History

Replace "neverallow domain" by "neverallow *"

Nick Kralevich authored 9 years ago

Modify many "neverallow domain" rules to be "neverallow *" rules
instead. This will catch more SELinux policy bugs where a label
is assigned an irrelevant rule, as well as catch situations where
a domain attribute is not assigned to a process.

Change-Id: I5b83a2504c13b384f9dff616a70ca733b648ccdf