When converting a non-MLS kernel binary policy to CIL, write the CIL
default MLS rules (since CIL requires at least one sensitivity,
and sensitivityorder statements) on separate lines.
This improves the readability of the resulting CIL policy.
Signed-off-by: James Carter <jwcart2@xxxxxxxxx>
---
v2: No changes
libsepol/src/kernel_to_cil.c | 6 +++---
1 file changed, 3 insertions(+), 3 deletions(-)
diff --git a/libsepol/src/kernel_to_cil.c b/libsepol/src/kernel_to_cil.c
index ede78a20..cca77251 100644
--- a/libsepol/src/kernel_to_cil.c
+++ b/libsepol/src/kernel_to_cil.c
@@ -777,9 +777,9 @@ exit:
static void write_default_mls_level(FILE *out)
{
- sepol_printf(out, "(sensitivity s0)");
- sepol_printf(out, "(sensitivityorder (s0))");
- sepol_printf(out, "(level %s (s0))", DEFAULT_LEVEL);
+ sepol_printf(out, "(sensitivity s0)\n");
+ sepol_printf(out, "(sensitivityorder (s0))\n");
+ sepol_printf(out, "(level %s (s0))\n", DEFAULT_LEVEL);
}
static int map_sensitivity_aliases_to_strs(char *key, void *data, void *args)
--
2.25.4
