diff options
| author | Dominick Grift <dominick.grift@defensec.nl> | 2024-07-08 21:38:13 +0200 |
|---|---|---|
| committer | Dominick Grift <dominick.grift@defensec.nl> | 2024-07-08 21:38:13 +0200 |
| commit | 8731149aae1259ed184e265782fc8fda2ef2d2d8 (patch) | |
| tree | 6eb05c9ef45be6926c5e36ccf16808a984c766e4 | |
| parent | 9da725c52e6a743a1c30257a85a9cf6ccc95042e (diff) | |
| download | selinux-policy-8731149aae1259ed184e265782fc8fda2ef2d2d8.tar.gz | |
nodenet: mlsconstrain
| -rw-r--r-- | src/net/nodenet.cil | 10 |
1 files changed, 4 insertions, 6 deletions
diff --git a/src/net/nodenet.cil b/src/net/nodenet.cil index 03801a7..e530aad 100644 --- a/src/net/nodenet.cil +++ b/src/net/nodenet.cil @@ -26,13 +26,11 @@ (in mcs - (mlsconstrain (node (sendto)) + (mlsconstrain (node (recvfrom sendto)) (or (dom h1 h2) - (neq t1 constrained.typeattr))) - - (mlsconstrain (node (recvfrom)) - (or (dom l1 l2) - (neq t1 constrained.typeattr)))) + (and + (neq t1 constrained.typeattr) + (neq t2 constrained.typeattr))))) (in net |