commit: 4d09b2040f97f8037540432595049e0dac21942e
Author: Christian Göttsche <cgzones <AT> googlemail <DOT> com>
AuthorDate: Tue Mar 22 17:05:40 2022 +0000
Commit: Jason Zaman <perfinion <AT> gentoo <DOT> org>
CommitDate: Thu Mar 31 02:40:53 2022 +0000
URL:
https://gitweb.gentoo.org/proj/hardened-refpolicy.git/commit/?id=4d09b204
policy.dtd: more strict bool/tunable and infoflow validation
Booleans and tunables must have a value of true or false and infoflow
needs to be of type read, write, none or both with a weight of 1 to 10.
Signed-off-by: Christian Göttsche <cgzones <AT> googlemail.com>
Signed-off-by: Jason Zaman <perfinion <AT> gentoo.org>
doc/policy.dtd | 8 ++++----
1 file changed, 4 insertions(+), 4 deletions(-)
diff --git a/doc/policy.dtd b/doc/policy.dtd
index 52829854..c36cb846 100644
--- a/doc/policy.dtd
+++ b/doc/policy.dtd
@@ -14,11 +14,11 @@
<!ELEMENT tunable (desc)>
<!ATTLIST tunable
name CDATA #REQUIRED
- dftval CDATA #REQUIRED>
+ dftval (true|false) #REQUIRED>
<!ELEMENT bool (desc)>
<!ATTLIST bool
name CDATA #REQUIRED
- dftval CDATA #REQUIRED>
+ dftval (true|false) #REQUIRED>
<!ELEMENT summary (#PCDATA)>
<!ELEMENT interface (summary,desc?,param+,infoflow?,(rolebase|rolecap)?)>
<!ATTLIST interface name CDATA #REQUIRED lineno CDATA #REQUIRED>
@@ -32,8 +32,8 @@
unused (true|false) "false">
<!ELEMENT infoflow EMPTY>
<!ATTLIST infoflow
- type CDATA #REQUIRED
- weight CDATA #IMPLIED>
+ type (read|write|none|both) #REQUIRED
+ weight (1|2|3|4|5|6|7|8|9|10) #IMPLIED>
<!ELEMENT rolebase EMPTY>
<!ELEMENT rolecap EMPTY>
