search

OwlCyberDefense / setools

setools has moved to https://github.com/SELinuxProject/setools
Other
91 stars 34 forks source link

Update searches and analyses to respect typebounds #101

Open pebenito opened 8 years ago

pebenito commented 8 years ago

Like with constraints, the kernel will reduce access via typebounds. Update analyses to remove permissions from rules based on bounding.

TBD: determine appropriate behaviors for relevant queries/analyses.

pebenito commented 8 years ago

Complication: rules with attributes. Permission removal may only apply to a subset of the types in the rule.