[gentoo-commits] proj/hardened-refpolicy:master commit in: doc/

["Jason Zaman" <perfinion@gentoo.org>]

commit:     4d09b2040f97f8037540432595049e0dac21942e
Author:     Christian Göttsche <cgzones <AT> googlemail <DOT> com>
AuthorDate: Tue Mar 22 17:05:40 2022 +0000
Commit:     Jason Zaman <perfinion <AT> gentoo <DOT> org>
CommitDate: Thu Mar 31 02:40:53 2022 +0000
URL:        https://gitweb.gentoo.org/proj/hardened-refpolicy.git/commit/?id=4d09b204

policy.dtd: more strict bool/tunable and infoflow validation

Booleans and tunables must have a value of true or false and infoflow
needs to be of type read, write, none or both with a weight of 1 to 10.

Signed-off-by: Christian Göttsche <cgzones <AT> googlemail.com>
Signed-off-by: Jason Zaman <perfinion <AT> gentoo.org>

 doc/policy.dtd | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/doc/policy.dtd b/doc/policy.dtd
index 52829854..c36cb846 100644
--- a/doc/policy.dtd
+++ b/doc/policy.dtd
@@ -14,11 +14,11 @@
 <!ELEMENT tunable (desc)>
 <!ATTLIST tunable
       name CDATA #REQUIRED
-      dftval CDATA #REQUIRED>
+      dftval (true|false) #REQUIRED>
 <!ELEMENT bool (desc)>
 <!ATTLIST bool
       name CDATA #REQUIRED
-      dftval CDATA #REQUIRED>
+      dftval (true|false) #REQUIRED>
 <!ELEMENT summary (#PCDATA)>
 <!ELEMENT interface (summary,desc?,param+,infoflow?,(rolebase|rolecap)?)>
 <!ATTLIST interface name CDATA #REQUIRED lineno CDATA #REQUIRED>
@@ -32,8 +32,8 @@
       unused (true|false) "false">
 <!ELEMENT infoflow EMPTY>
 <!ATTLIST infoflow
-      type CDATA #REQUIRED
-      weight CDATA #IMPLIED>
+      type (read|write|none|both) #REQUIRED
+      weight (1|2|3|4|5|6|7|8|9|10) #IMPLIED>
 <!ELEMENT rolebase EMPTY>
 <!ELEMENT rolecap EMPTY>