Lindent.
Merged patch to remove TE rule conflict checking from the parser from
Joshua Brindle. This can only be done properly by the expander.
Merged patch to make checkpolicy/checkmodule handling of
duplicate/conflicting TE rules the same as the expander from Joshua
Brindle.
Merged optionals in base take 2 patch set from Joshua Brindle.
Fixed checkmodule to call link_modules prior to expand_module to handle
optionals.
Fixed require_class to avoid shadowing permissions already defined in an
inherited common definition.
Added a check for failure to declare each sensitivity in a level
definition.
Changed to clone level data for aliased sensitivities to avoid double free
upon sens_destroy. Bug reported by Kevin Carr of Tresys Technology.
Added a check for failure to declare each sensitivity in a level
definition.
Changed to clone level data for aliased sensitivities to avoid double free
upon sens_destroy. Bug reported by Kevin Carr of Tresys Technology.
Added error checking of all ebitmap_set_bit calls for out of memory
conditions.
Merged removal of compatibility handling of netlink classes (requirement
that policies with newer versions include the netlink class
definitions, remapping of fine-grained netlink classes in newer source
policies to single netlink class when generating older policies) from
George Coker.
Removed obsolete cond_check_type_rules() function and call and
cond_optimize_lists() call from checkpolicy.c; these are handled during
parsing and expansion now.
Updated calls to expand_module for interface change.
Changed checkmodule to verify that expand_module succeeds when building
base modules.
Merged module compiler fixes from Joshua Brindle.
Removed direct calls to hierarchy_check_constraints() and
check_assertions() from checkpolicy since they are now called
internally by expand_module().
Removed obsolete cond_check_type_rules() function and call and
cond_optimize_lists() call from checkpolicy.c; these are handled during
parsing and expansion now.
Updated calls to expand_module for interface change.
Changed checkmodule to verify that expand_module succeeds when building
base modules.
Merged module compiler fixes from Joshua Brindle.
Removed direct calls to hierarchy_check_constraints() and
check_assertions() from checkpolicy since they are now called
internally by expand_module().
