dear list;
i would like to add some more restrictions on roles in selinux. so i need to know where exactly the flax security server or object managers check roles in each access. e.g if the role of the subject is valid or not. i have got file "roles.c" in libsepol package. is it the only file, containing modules for that purpose or not? btw, is there any reference such as a paper or article about that?
regards.
