From 9f931bdf593be12e01739a4196a0a07475aa1efd Mon Sep 17 00:00:00 2001 From: Adrian Szyndela Date: Thu, 15 Nov 2018 17:01:27 +0100 Subject: [PATCH] policychecker: allow sending signal rules with only send_interface If the global policy for signals is deny, then we need a way to choose who can send signals. They (usually) have no destination, so the allowing rules can't have destination. This commit changes checking rules to allow policy rules with send_interface constraint, without send_destination, when send_type="signal" is allows specified. Change-Id: I041b4e409cbffeae2edaaec8bb2dfa8f60e3994f --- policychecker/rules.xsl | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/policychecker/rules.xsl b/policychecker/rules.xsl index 8a8d3f4..d05fd3b 100644 --- a/policychecker/rules.xsl +++ b/policychecker/rules.xsl @@ -137,7 +137,7 @@ - You mustn't use send_interface without send_destination + You mustn't use send_interface without send_destination, unless you limit the rule to only signals with send_type="signal" You mustn't use receive_interface without receive_sender -- 2.34.1