|
@@ -479,7 +479,7 @@ static int context_struct_compute_av(struct context *scontext,
|
|
|
if ((constraint->permissions & (avd->allowed)) &&
|
|
|
!constraint_expr_eval(scontext, tcontext, NULL,
|
|
|
constraint->expr)) {
|
|
|
- avd->allowed = (avd->allowed) & ~(constraint->permissions);
|
|
|
+ avd->allowed &= ~(constraint->permissions);
|
|
|
}
|
|
|
constraint = constraint->next;
|
|
|
}
|
|
@@ -498,8 +498,8 @@ static int context_struct_compute_av(struct context *scontext,
|
|
|
break;
|
|
|
}
|
|
|
if (!ra)
|
|
|
- avd->allowed = (avd->allowed) & ~(PROCESS__TRANSITION |
|
|
|
- PROCESS__DYNTRANSITION);
|
|
|
+ avd->allowed &= ~(PROCESS__TRANSITION |
|
|
|
+ PROCESS__DYNTRANSITION);
|
|
|
}
|
|
|
|
|
|
/*
|