summaryrefslogtreecommitdiff
path: root/src/misc/constrain/rbacsep.cil
diff options
context:
space:
mode:
authorJohn Turner <jturner.usa@gmail.com>2025-08-16 14:43:06 -0400
committerJohn Turner <jturner.usa@gmail.com>2025-08-16 14:43:06 -0400
commit58ffeaf9b49e662e49d24a2d71dcdc9fac2949f8 (patch)
tree84c645e32aac8eb468f41df33fbac7b0a8584887 /src/misc/constrain/rbacsep.cil
parentcfd55472db08f37b2123c350ce76fb3d916d25f6 (diff)
downloadselinux-policy-58ffeaf9b49e662e49d24a2d71dcdc9fac2949f8.tar.gz
auto format all files
Diffstat (limited to 'src/misc/constrain/rbacsep.cil')
-rw-r--r--src/misc/constrain/rbacsep.cil144
1 files changed, 72 insertions, 72 deletions
diff --git a/src/misc/constrain/rbacsep.cil b/src/misc/constrain/rbacsep.cil
index 2e15592..27c4f00 100644
--- a/src/misc/constrain/rbacsep.cil
+++ b/src/misc/constrain/rbacsep.cil
@@ -1,103 +1,103 @@
-;; SPDX-FileCopyrightText: © 2025 Dominick Grift <dominick.grift@defensec.nl>
+;; SPDX-FileCopyrightText: M-BM-) 2025 Dominick Grift <dominick.grift@defensec.nl>
;; SPDX-License-Identifier: Unlicense
(block rbacsep
- (constrain (fifo_file (append getattr read setattr write))
- (or (or (or (or (eq r1 r2)
- (and (eq r1 exempt.roleattr)
- (neq t1 constrained.typeattr)))
- (eq t1 exempt.subj.typeattr))
- (eq t2 exempt.obj.typeattr))
- (and (eq t1 exemptsource.typeattr)
- (eq t2 exempttarget.typeattr))))
-
- (constrain (constrainobject (append setattr write))
- (or (or (or (eq r1 r2)
- (and (eq r1 exempt.roleattr)
- (neq t1 constrained.typeattr)))
- (eq t1 exempt.subj.typeattr))
- (eq t2 exempt.obj.typeattr)))
-
- (constrain (constrainobject (getattr read))
- (or (or (or (or (or (eq r1 r2)
- (and (eq r1 exempt.roleattr)
- (neq t1 constrained.typeattr)))
- (eq t1 exempt.subj.typeattr))
- (eq t2 exempt.obj.typeattr))
- (and (eq r2 exempt.roleattr) (eq t2 typeattr)))
- (and
- (eq t1 readstatesource.typeattr)
- (eq t2 readstatetarget.typeattr))))
-
- (constrain
- (process (getrlimit getsched ptrace setrlimit setsched sigchld sigkill
- signal signull sigstop))
- (or (or (or (eq r1 r2)
- (and (eq r1 exempt.roleattr) (neq t1 constrained.typeattr)))
- (eq t1 exempt.subj.typeattr))
- (and (eq t1 exemptsource.typeattr) (eq t2 exempttarget.typeattr))))
-
- (macro type ((type ARG1))
- (typeattributeset typeattr ARG1))
-
- (typeattribute typeattr)
-
- (block constrained
+ (constrain (fifo_file (append getattr read setattr write))
+ (or (or (or (or (eq r1 r2)
+ (and (eq r1 exempt.roleattr)
+ (neq t1 constrained.typeattr)))
+ (eq t1 exempt.subj.typeattr))
+ (eq t2 exempt.obj.typeattr))
+ (and (eq t1 exemptsource.typeattr)
+ (eq t2 exempttarget.typeattr))))
+
+ (constrain (constrainobject (append setattr write))
+ (or (or (or (eq r1 r2)
+ (and (eq r1 exempt.roleattr)
+ (neq t1 constrained.typeattr)))
+ (eq t1 exempt.subj.typeattr))
+ (eq t2 exempt.obj.typeattr)))
+
+ (constrain (constrainobject (getattr read))
+ (or (or (or (or (or (eq r1 r2)
+ (and (eq r1 exempt.roleattr)
+ (neq t1 constrained.typeattr)))
+ (eq t1 exempt.subj.typeattr))
+ (eq t2 exempt.obj.typeattr))
+ (and (eq r2 exempt.roleattr) (eq t2 typeattr)))
+ (and
+ (eq t1 readstatesource.typeattr)
+ (eq t2 readstatetarget.typeattr))))
+
+ (constrain
+ (process (getrlimit getsched ptrace setrlimit setsched sigchld sigkill
+ signal signull sigstop))
+ (or (or (or (eq r1 r2)
+ (and (eq r1 exempt.roleattr) (neq t1 constrained.typeattr)))
+ (eq t1 exempt.subj.typeattr))
+ (and (eq t1 exemptsource.typeattr) (eq t2 exempttarget.typeattr))))
(macro type ((type ARG1))
- (typeattributeset typeattr ARG1))
+ (typeattributeset typeattr ARG1))
- (typeattribute typeattr))
+ (typeattribute typeattr)
- (block exempt
+ (block constrained
- (macro role ((role ARG1))
- (roleattributeset roleattr ARG1))
+ (macro type ((type ARG1))
+ (typeattributeset typeattr ARG1))
- (roleattribute roleattr)
+ (typeattribute typeattr))
- (block obj
+ (block exempt
- (macro type ((type ARG1))
- (typeattributeset typeattr ARG1))
+ (macro role ((role ARG1))
+ (roleattributeset roleattr ARG1))
- (typeattribute typeattr))
+ (roleattribute roleattr)
- (block subj
+ (block obj
- (macro type ((type ARG1))
- (typeattributeset typeattr ARG1))
+ (macro type ((type ARG1))
+ (typeattributeset typeattr ARG1))
- (typeattribute typeattr)))
+ (typeattribute typeattr))
- (block exemptsource
+ (block subj
- (macro type ((type ARG1))
- (typeattributeset typeattr ARG1))
+ (macro type ((type ARG1))
+ (typeattributeset typeattr ARG1))
- (typeattribute typeattr))
+ (typeattribute typeattr)))
- (block exempttarget
+ (block exemptsource
- (macro type ((type ARG1))
- (typeattributeset typeattr ARG1))
+ (macro type ((type ARG1))
+ (typeattributeset typeattr ARG1))
- (typeattribute typeattr))
+ (typeattribute typeattr))
- (block readstatesource
+ (block exempttarget
- (macro type ((type ARG1))
- (typeattributeset typeattr ARG1))
+ (macro type ((type ARG1))
+ (typeattributeset typeattr ARG1))
- (typeattribute typeattr))
+ (typeattribute typeattr))
- (block readstatetarget
+ (block readstatesource
- (macro type ((type ARG1))
- (typeattributeset typeattr ARG1))
+ (macro type ((type ARG1))
+ (typeattributeset typeattr ARG1))
+
+ (typeattribute typeattr))
+
+ (block readstatetarget
+
+ (macro type ((type ARG1))
+ (typeattributeset typeattr ARG1))
- (typeattribute typeattr)))
+ (typeattribute typeattr)))
(in obj