search

SELinuxProject / selint

Static code analysis of refpolicy style SELinux policy
Apache License 2.0
38 stars 17 forks source link

Avoid exceptions override #234

Closed cgzones closed 2 years ago

cgzones commented 2 years ago

In a require block of

gen_require(`
    type a; #selint-disable: W-010
    type b; #selint-disable: W-011
')

the SELint exceptions "W-011" will override "W-010" of the declaration for type a and leak the previous one set.

Fixes: da6d80e7 ("Apply command to all declarations in a single require statement")

dburgener commented 2 years ago

Merged, thanks!