kernel-ark/security/selinux/ss
Eamon Walsh 2e08c0c1c3 selinux: make mls_compute_sid always polyinstantiate
This patch removes the requirement that the new and related object types
differ in order to polyinstantiate by MLS level.  This allows MLS
polyinstantiation to occur in the absence of explicit type_member rules or
when the type has not changed.

Potential users of this support include pam_namespace.so (directory
polyinstantiation) and the SELinux X support (property polyinstantiation).

Signed-off-by: Eamon Walsh <ewalsh@tycho.nsa.gov>
Acked-by:  Stephen Smalley <sds@tycho.nsa.gov>
Signed-off-by: James Morris <jmorris@namei.org>
2008-01-25 11:29:56 +11:00
..
avtab.c security/selinux: Add missing "space" 2008-01-25 11:29:44 +11:00
avtab.h SELinux: add more validity checks on policy load 2007-11-08 08:56:23 +11:00
conditional.c SELinux: add more validity checks on policy load 2007-11-08 08:56:23 +11:00
conditional.h
constraint.h
context.h
ebitmap.c
ebitmap.h
hashtab.c
hashtab.h
Makefile
mls_types.h
mls.c selinux: make mls_compute_sid always polyinstantiate 2008-01-25 11:29:56 +11:00
mls.h SELinux: add more validity checks on policy load 2007-11-08 08:56:23 +11:00
policydb.c SELinux: add more validity checks on policy load 2007-11-08 08:56:23 +11:00
policydb.h SELinux: add more validity checks on policy load 2007-11-08 08:56:23 +11:00
services.c selinux: fix memory leak in netlabel code 2008-01-22 09:31:00 +11:00
services.h
sidtab.c
sidtab.h
symtab.c
symtab.h