Eric Paris 3f12070e27 SELinux: policy selectable handling of unknown classes and perms ... Allow policy to select, in much the same way as it selects MLS support, how the kernel should handle access decisions which contain either unknown classes or unknown permissions in known classes. The three choices for the policy flags are 0 - Deny unknown security access. (default) 2 - reject loading policy if it does not contain all definitions 4 - allow unknown security access The policy's choice is exported through 2 booleans in selinuxfs. /selinux/deny_unknown and /selinux/reject_unknown. Signed-off-by: Eric Paris <eparis@redhat.com> Acked-by: Stephen Smalley <sds@tycho.nsa.gov> Signed-off-by: James Morris <jmorris@namei.org>		2007-10-17 08:59:33 +10:00
..
av_inherit.h
av_perm_to_string.h	security: Protection for exploiting null dereference using mmap	2007-07-11 22:52:29 -04:00
av_permissions.h	security: Protection for exploiting null dereference using mmap	2007-07-11 22:52:29 -04:00
avc_ss.h
avc.h	SELinux: Improve read/write performance	2007-10-17 08:59:31 +10:00
class_to_string.h	security: Protection for exploiting null dereference using mmap	2007-07-11 22:52:29 -04:00
common_perm_to_string.h
conditional.h
flask.h	security: Protection for exploiting null dereference using mmap	2007-07-11 22:52:29 -04:00
initial_sid_to_string.h
netif.h
netlabel.h
objsec.h	SELinux: Improve read/write performance	2007-10-17 08:59:31 +10:00
security.h	SELinux: policy selectable handling of unknown classes and perms	2007-10-17 08:59:33 +10:00
xfrm.h