commit: a32a76910872aeeae61c4a6d4d2e809f3033eb33
Author: Chris PeBenito <pebenito <AT> ieee <DOT> org>
AuthorDate: Mon Aug 4 14:43:35 2025 +0000
Commit: Jason Zaman <perfinion <AT> gentoo <DOT> org>
CommitDate: Tue Sep 2 22:04:48 2025 +0000
URL:
https://gitweb.gentoo.org/proj/hardened-refpolicy.git/commit/?id=a32a7691
check_fc_files.py: Add additional optional pattern reduction.
Signed-off-by: Chris PeBenito <pebenito <AT> ieee.org>
Signed-off-by: Jason Zaman <perfinion <AT> gentoo.org>
testing/check_fc_files.py | 1 +
1 file changed, 1 insertion(+)
diff --git a/testing/check_fc_files.py b/testing/check_fc_files.py
index 9849b2b5d..7f8a6383a 100755
--- a/testing/check_fc_files.py
+++ b/testing/check_fc_files.py
@@ -265,6 +265,7 @@ def analyze_fc_file(fc_path):
reduced_path = re.sub(r'\[[-0-9A-Za-z_.^]+\][?*]', '',
reduced_path)
reduced_path = re.sub(r'\[[-0-9A-Za-z_.^]+\](\+)?', '∞',
reduced_path)
reduced_path = reduced_path.replace('/[^/]+/', '/∞/')
+ reduced_path = re.sub(r'\([·∞†δ]{2,4}\)\?', '', reduced_path)
if '.' in reduced_path:
print(f"{prefix}unescaped dot still present {path} after being
reduced to {reduced_path} (suggestion: use \\. to match a dot, or a charset
like [^/])") # noqa
