Patches 1 and 2 are cleanups Patch 3 allows IP address and mask values to be directly written. Patches 4 and 7 update and fix the CIL documentation. Patch 5 improves the handling of strings passed into a call for named type transitions. Patch 6 allows the path of a filecon rule to be passed as an argument in a call. Patch 8 improves writing out statements in macros and macro arguments. Patch 9 adds a warning when an identifier has the same name as a call argument even though it has a different flavor. See the individual patches for more details. James Carter (9): libsepol/cil: Use struct cil_db * instead of void * libsepol/cil: Refactor and improve handling of order rules libsepol/cil: Allow IP address and mask values to be directly written secilc/docs: Update syntax for IP addresses and nodecon libsepol/cil: Refactor Named Type Transition Filename Creation libsepol/cil: Allow paths in filecon rules to be passed as arguments secilc/docs: Fix and update the documentation for macro parameters libsepol/cil: Add pointers to datums to improve writing out AST libsepol/cil: Give warning for name that has different flavor libsepol/cil/src/cil.c | 108 +- libsepol/cil/src/cil_build_ast.c | 461 +++----- libsepol/cil/src/cil_build_ast.h | 13 +- libsepol/cil/src/cil_copy_ast.c | 96 +- libsepol/cil/src/cil_copy_ast.h | 5 +- libsepol/cil/src/cil_flavor.h | 2 +- libsepol/cil/src/cil_fqn.c | 2 +- libsepol/cil/src/cil_internal.h | 58 +- libsepol/cil/src/cil_policy.c | 5 +- libsepol/cil/src/cil_post.c | 14 +- libsepol/cil/src/cil_reset_ast.c | 16 +- libsepol/cil/src/cil_resolve_ast.c | 1027 +++++++---------- libsepol/cil/src/cil_resolve_ast.h | 124 +- libsepol/cil/src/cil_verify.c | 80 +- libsepol/cil/src/cil_verify.h | 1 + libsepol/cil/src/cil_write_ast.c | 125 +- secilc/docs/cil_call_macro_statements.md | 6 +- .../docs/cil_network_labeling_statements.md | 6 +- 18 files changed, 982 insertions(+), 1167 deletions(-) -- 2.41.0
