From patchwork Mon Mar 21 10:52:50 2022 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Dominick Grift X-Patchwork-Id: 12787093 X-Patchwork-Delegate: paul@paul-moore.com Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from vger.kernel.org (vger.kernel.org [23.128.96.18]) by smtp.lore.kernel.org (Postfix) with ESMTP id 5760BC433F5 for ; Mon, 21 Mar 2022 10:58:22 +0000 (UTC) Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1346533AbiCUK7m (ORCPT ); Mon, 21 Mar 2022 06:59:42 -0400 Received: from lindbergh.monkeyblade.net ([23.128.96.19]:34616 "EHLO lindbergh.monkeyblade.net" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1344310AbiCUK7i (ORCPT ); Mon, 21 Mar 2022 06:59:38 -0400 X-Greylist: delayed 297 seconds by postgrey-1.37 at lindbergh.monkeyblade.net; Mon, 21 Mar 2022 03:58:09 PDT Received: from markus.defensec.nl (markus.defensec.nl [IPv6:2a10:3781:2099::123]) by lindbergh.monkeyblade.net (Postfix) with ESMTPS id 871231A838 for ; Mon, 21 Mar 2022 03:58:07 -0700 (PDT) Received: from brutus.. (brutus.lan [IPv6:2a10:3781:2099::438]) by markus.defensec.nl (Postfix) with ESMTPSA id 6C028FC0729; Mon, 21 Mar 2022 11:53:05 +0100 (CET) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=defensec.nl; s=default; t=1647859985; bh=MlD1H0mBcrly5/3Qs58LWk5S1/iYrXlk7IyVg9ckBpg=; h=From:To:Cc:Subject:Date:From; b=MEkh19K5wf1GC3HSgIpeZsCVAouCw8eTfsQst98o/OqeIUvxdQAQ16/EeRwzlx/3a JUUnKulzhozubidibkO3DY6zsTwvbdNmujuao6jCbPOq8u1YLt4kGwgq4A9G9xgvo0 xwYlRzjUwOnl7E8zhXu0YbAFe5OHuB40MU62QJnY= From: Dominick Grift To: selinux@vger.kernel.org Cc: Dominick Grift Subject: [PATCH] optional statement is not valid in if and require statement Date: Mon, 21 Mar 2022 11:52:50 +0100 Message-Id: <20220321105250.148231-1-dominick.grift@defensec.nl> X-Mailer: git-send-email 2.35.1 MIME-Version: 1.0 Precedence: bulk List-ID: X-Mailing-List: selinux@vger.kernel.org the conditional-policy-statements chapter describes which statements are allowed in if statements and optional is not one of them Signed-off-by: Dominick Grift --- src/modular_policy_statements.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/modular_policy_statements.md b/src/modular_policy_statements.md index e62e6ac..508d531 100644 --- a/src/modular_policy_statements.md +++ b/src/modular_policy_statements.md @@ -190,7 +190,7 @@ Conditional Policy Statements | *if* Statement | *optional* Statement | *require* Statement | | ----------------------- | ----------------------- | ----------------------- | -| Yes | Yes | Yes | +| No | Yes | No | **Examples:**