<snip>

>                 memset(&avdatum, 0, sizeof avdatum);
> +               /*
> +                * AUDITDENY and DONTAUDIT are &= assigned, versus |= for
> +                * others. Initialize the data accordingly.
> +                */
> +               avdatum.data = (key->specified &
> +                              (AVRULE_AUDITDENY | AVRULE_DONTAUDIT)) ? ~0 : 
> 0;

Nak this, surprising this is working and producing correct output, but
we would want to check
against the AVTAB defines...

This patch, while simple, for some reason is getting the best of me :-P

>                 /* this is used to get the node - insertion is actually 
> unique */
>                 node = avtab_insert_nonunique(avtab, key, &avdatum);
>                 if (!node) {
<snip>
_______________________________________________
Selinux mailing list
Selinux@tycho.nsa.gov
To unsubscribe, send email to selinux-le...@tycho.nsa.gov.
To get help, send an email containing "help" to selinux-requ...@tycho.nsa.gov.

Reply via email to