linux/security/selinux/ss
Chad Sellers 5a64d4438e SELinux: remove current object class and permission validation mechanism
Removes the current SELinux object class and permission validation code,
as the current code makes it impossible to change or remove object classes
and permissions on a running system. Additionally, the current code does
not actually validate that the classes and permissions are correct, but
instead merely validates that they do not change between policy reloads.

Signed-off-by: Chad Sellers <csellers@tresys.com>
Acked-by:  Stephen Smalley <sds@tycho.nsa.gov>
Signed-off-by: James Morris <jmorris@namei.org>
2006-11-28 12:04:35 -05:00
..
avtab.c
avtab.h
conditional.c
conditional.h
constraint.h
context.h
ebitmap.c NetLabel: better error handling involving mls_export_cat() 2006-10-15 23:14:15 -07:00
ebitmap.h [NetLabel]: SELinux support 2006-09-22 14:53:36 -07:00
hashtab.c
hashtab.h
Makefile
mls.c NetLabel: better error handling involving mls_export_cat() 2006-10-15 23:14:15 -07:00
mls.h [NetLabel]: SELinux support 2006-09-22 14:53:36 -07:00
mls_types.h
policydb.c SELinux: Bug fix in polidydb_destroy 2006-10-11 23:59:41 -07:00
policydb.h [PATCH] selinux: add support for range transitions on object classes 2006-09-26 08:48:52 -07:00
services.c SELinux: remove current object class and permission validation mechanism 2006-11-28 12:04:35 -05:00
services.h
sidtab.c
sidtab.h
symtab.c
symtab.h