Home | History | Annotate | Download | only in checkpolicy

Lines Matching refs:rule

1457 			yyerror("* not allowed in this type of rule");
1469 yyerror("~ not allowed in this type of rule");
1513 int define_compute_type_helper(int which, avrule_t ** rule)
1585 *rule = avrule;
1728 int define_te_avtab_helper(int which, avrule_t ** rule)
1822 yywarn("dontaudit rule with a ~?");
1865 *rule = avrule;
1914 /* The role-types rule is no longer used to declare regular role or
1931 yyerror("no role name for role-types rule?");
2124 /* This function eliminates the ordering dependency of role dominance rule */
2348 struct role_trans_rule *rule = NULL;
2466 /* Now add the real rule */
2467 rule = malloc(sizeof(struct role_trans_rule));
2468 if (!rule) {
2472 memset(rule, 0, sizeof(struct role_trans_rule));
2473 rule->roles = roles;
2474 rule->types = types;
2475 rule->classes = e_classes;
2476 rule->new_role = role->s.value;
2478 append_role_trans(rule);
2667 /* Now add the real rule since we didn't find any duplicates */
3223 * check that rule already exists in base -- that will be
4631 range_trans_rule_t *rule;
4635 yyerror("range_transition rule in non-MLS configuration");
4661 rule = malloc(sizeof(struct range_trans_rule));
4662 if (!rule) {
4666 range_trans_rule_init(rule);
4669 if (set_types(&rule->stypes, id, &add, 0))
4674 if (set_types(&rule->ttypes, id, &add, 0))
4679 if (read_classes(&rule->tclasses))
4690 if (ebitmap_set_bit(&rule->tclasses, cladatum->s.value - 1, TRUE)) {
4711 rule->trange.level[l].sens = levdatum->level->sens;
4715 &rule->trange.level[l].cat)) {
4727 if (mls_semantic_level_cpy(&rule->trange.level[1],
4728 &rule->trange.level[0])) {
4734 append_range_trans(rule);
4738 range_trans_rule_destroy(rule);
4739 free(rule);