1
1
mirror of https://github.com/containers/udica synced 2024-09-24 10:20:44 +02:00
udica/udica/templates
Vit Mojzis 09bf6b339f Update templates to work properly with new cil parser
Cil parser was recently updated to reject the following:
(block template1 (type t) )
(block template2 (blockinherit template1))
(block b (blockinherit template1) (blockinherit template2))

Re-declaration of type t
Previous declaration of type at /var/lib/selinux/targeted/tmp/modules/400/test/cil:1
Failed to copy block contents into blockinherit
Failed to resolve AST
semodule:  Failed!

Remove (blockinherit container) from all templates so that "process" and
"socket" are only defined once (by inheriting "container" block in the
generated policy).
All allow rules referencing "process" and "socket" now need to be
enclosed in an optional block.

While at it, unify indentation.

Signed-off-by: Vit Mojzis <vmojzis@redhat.com>
2021-08-26 18:16:40 +02:00
..
base_container.cil Make container types mcs-constrained 2020-09-17 22:00:55 +02:00
config_container.cil Update templates to work properly with new cil parser 2021-08-26 18:16:40 +02:00
home_container.cil Update templates to work properly with new cil parser 2021-08-26 18:16:40 +02:00
log_container.cil Update templates to work properly with new cil parser 2021-08-26 18:16:40 +02:00
net_container.cil Update templates to work properly with new cil parser 2021-08-26 18:16:40 +02:00
tmp_container.cil Update templates to work properly with new cil parser 2021-08-26 18:16:40 +02:00
tty_container.cil Update templates to work properly with new cil parser 2021-08-26 18:16:40 +02:00
virt_container.cil Update templates to work properly with new cil parser 2021-08-26 18:16:40 +02:00
x_container.cil Update templates to work properly with new cil parser 2021-08-26 18:16:40 +02:00