| commit | 1ef665cb92a59f66563addb317541be986e11169 | [log] [tgz] |
|---|---|---|
| author | Steve Lawrence <slawrence@tresys.com> | Wed Jan 25 12:17:16 2017 -0500 |
| committer | James Carter <jwcart2@tycho.nsa.gov> | Wed Jan 25 14:47:16 2017 -0500 |
| tree | b405dba37e4cc7df00333805533920eb50d5c43b | |
| parent | 05abcb1d13a1069556d21070fa299f3ffc4a50a4 [diff] |
libsepol: fix pp module to cil nodecon statement Policy modules do not have the concept of named IP addresses like CIL does. So when converting nodecode statements from pp policy modules to CIL, we need to wrap the IP address and mask parameters in parentheses so that the CIL compiler does not try to resolve them as named addresses, but instead treats them as anonymous. Signed-off-by: Steve Lawrence <slawrence@tresys.com>