Chris PeBenito f497b8df50 Christopher J. PeBenito wrote: ... > We could add another 'or' on the above constraint: > > or ( (t2 == mlsfilewrite_in_range) and (l1 dom l2) and (h1 domby h2) ) > > I believe that would be the constraint you were looking for. I don't > like the name of that attribute, but I couldn't come up with a better > one off the top of my head. :) > Attached is a patch which I've tested against selinux-policy-2.4.2-1 that implements this additional constraint. The name is still a bit forced, but it works. -matt <mra at hp dot com>		2006-11-01 15:42:22 +00:00
..
admin	patch from dan Tue, 24 Oct 2006 11:00:28 -0400	2006-10-31 21:01:48 +00:00
apps	patch from dan Tue, 24 Oct 2006 11:00:28 -0400	2006-10-31 21:01:48 +00:00
kernel	Christopher J. PeBenito wrote:	2006-11-01 15:42:22 +00:00
services	patch from dan Tue, 24 Oct 2006 11:00:28 -0400	2006-10-31 21:01:48 +00:00
system	patch from dan Tue, 24 Oct 2006 11:00:28 -0400	2006-10-31 21:01:48 +00:00