Skip to content

Commit

Permalink
libsepol/utils: improve wording
Browse files Browse the repository at this point in the history
A request is denied with SEPOL_COMPUTEAV_RBAC if the source role is not
allowed to transition to the target role, granted via a

    allow source_role target_role;

statement.

Signed-off-by: Christian Göttsche <[email protected]>
Acked-by: James Carter <[email protected]>
  • Loading branch information
cgzones authored and jwcart2 committed Jul 6, 2022
1 parent 301cd64 commit 36bf1be
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion libsepol/utils/sepol_check_access.c
Original file line number Diff line number Diff line change
Expand Up @@ -109,7 +109,7 @@ int main(int argc, char *argv[])
if (reason & SEPOL_COMPUTEAV_RBAC) {
if (i > 0)
printf(", ");
printf("transition-constraint");
printf("role-transition");
i++;
}
if (reason & SEPOL_COMPUTEAV_BOUNDS) {
Expand Down

0 comments on commit 36bf1be

Please sign in to comment.