user/sven/linux.git/scripts/selinux, branch v4.4

selinux: explicitly declare the role "base_r"

2015-07-13T17:32:00Z

This fixes the compilation of policy generated by mdp with the recent version of checkpolicy. Signed-off-by: Laurent Bigonville Acked-by: Stephen Smalley Signed-off-by: Paul Moore

kbuild: Make scripts executable

2014-08-20T14:03:45Z

The Makefiles call the respective interpreter explicitly, but this makes it easier to use the scripts manually. Signed-off-by: Michal Marek

Merge branch 'next' of git://git.infradead.org/users/pcmoore/selinux into next

2014-07-19T07:39:19Z

selinux, kbuild: remove unnecessary $(hostprogs-y) from clean-files

2014-06-17T21:31:40Z

Files added to hostprogs-y are cleaned. (See scripts/Makefile.clean) Adding them to clean-files is redundant. Signed-off-by: Masahiro Yamada Acked-by: Paul Moore Signed-off-by: Paul Moore

kbuild: trivial - remove trailing empty lines

2014-06-09T22:04:06Z

Signed-off-by: Masahiro Yamada

Create Documentation/security/,

2011-05-19T22:59:38Z

move LSM-, credentials-, and keys-related files from Documentation/ to Documentation/security/, add Documentation/security/00-INDEX, and update all occurrences of Documentation/ to Documentation/security/.

SELinux: Auto-generate security_is_socket_class

2011-03-03T20:19:43Z

The security_is_socket_class() is auto-generated by genheaders based on classmap.h to reduce maintenance effort when a new class is defined in SELinux kernel. The name for any socket class should be suffixed by "socket" and doesn't contain more than one substr of "socket". Signed-off-by: Harry Ciao Signed-off-by: Eric Paris Acked-by: Stephen Smalley

selinux: fix warning in genheaders

2010-03-15T21:47:36Z

Fix const warning in the genheaders script as a result of changes to the headers, as noted here: http://linux.derkeiler.com/Mailing-Lists/Kernel/2010-03/msg03977.html Reported-by: Stephen Rothwell Signed-off-by: James Morris

SELinux: header generation may hit infinite loop

2009-11-22T22:00:44Z

If a permission name is long enough the selinux class definition generation tool will go into a infinite loop. This is because it's macro max() is fooled into thinking it is dealing with unsigned numbers. This patch makes sure the macro always uses signed number so 1 > -1. Signed-off-by: Eric Paris Signed-off-by: James Morris

selinux: Fix warnings

2009-11-18T22:08:44Z

scripts/selinux/genheaders/genheaders.c:20: warning: no previous prototype for ?usage? scripts/selinux/genheaders/genheaders.c:26: warning: no previous prototype for ?stoupperx? Signed-off-by: Alan Cox Acked-by: WANG Cong Signed-off-by: James Morris