Re: [Xen-devel] [PATCH 2/4] Add device tree ocontext nodes to Xen policy

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On 03/12/2015 01:27 PM, Julien Grall wrote:
Hi Daniel,

On 12/03/15 17:12, Daniel De Graaf wrote:
  		        ;
+dtree_context_def	: DEVICETREECON path security_context_def
+		        {if (define_devicetree_context()) return -1;}
+		        ;

The regex for matching the device tree path is different from a path.

the pathname convention is:

node-name@unit-address

The characters allowed for node-name/unit-name are:
	0-9 a-z A-Z , . _ + -

Although the @unit-address may be ommitted.

So the regex should be something like:
"/"({alnum}|['\._\+\-@])*

This is addressed in patch 4, where a quoted version of the path
expression is added which allows these characters (and others).

--
Daniel De Graaf
National Security Agency
_______________________________________________
Selinux mailing list
Selinux@xxxxxxxxxxxxx
To unsubscribe, send email to Selinux-leave@xxxxxxxxxxxxx.
To get help, send an email containing "help" to Selinux-request@xxxxxxxxxxxxx.




[Index of Archives]     [Selinux Refpolicy]     [Linux SGX]     [Fedora Users]     [Fedora Desktop]     [Yosemite Photos]     [Yosemite Camping]     [Yosemite Campsites]     [KDE Users]     [Gnome Users]

  Powered by Linux