diff options
author | John Turner <jturner.usa@gmail.com> | 2025-08-16 14:43:06 -0400 |
---|---|---|
committer | John Turner <jturner.usa@gmail.com> | 2025-08-16 14:43:06 -0400 |
commit | 58ffeaf9b49e662e49d24a2d71dcdc9fac2949f8 (patch) | |
tree | 84c645e32aac8eb468f41df33fbac7b0a8584887 /src/misc/constrain/rbacsep.cil | |
parent | cfd55472db08f37b2123c350ce76fb3d916d25f6 (diff) | |
download | selinux-policy-58ffeaf9b49e662e49d24a2d71dcdc9fac2949f8.tar.gz |
auto format all files
Diffstat (limited to 'src/misc/constrain/rbacsep.cil')
-rw-r--r-- | src/misc/constrain/rbacsep.cil | 144 |
1 files changed, 72 insertions, 72 deletions
diff --git a/src/misc/constrain/rbacsep.cil b/src/misc/constrain/rbacsep.cil index 2e15592..27c4f00 100644 --- a/src/misc/constrain/rbacsep.cil +++ b/src/misc/constrain/rbacsep.cil @@ -1,103 +1,103 @@ -;; SPDX-FileCopyrightText: © 2025 Dominick Grift <dominick.grift@defensec.nl> +;; SPDX-FileCopyrightText: M-BM-) 2025 Dominick Grift <dominick.grift@defensec.nl> ;; SPDX-License-Identifier: Unlicense (block rbacsep - (constrain (fifo_file (append getattr read setattr write)) - (or (or (or (or (eq r1 r2) - (and (eq r1 exempt.roleattr) - (neq t1 constrained.typeattr))) - (eq t1 exempt.subj.typeattr)) - (eq t2 exempt.obj.typeattr)) - (and (eq t1 exemptsource.typeattr) - (eq t2 exempttarget.typeattr)))) - - (constrain (constrainobject (append setattr write)) - (or (or (or (eq r1 r2) - (and (eq r1 exempt.roleattr) - (neq t1 constrained.typeattr))) - (eq t1 exempt.subj.typeattr)) - (eq t2 exempt.obj.typeattr))) - - (constrain (constrainobject (getattr read)) - (or (or (or (or (or (eq r1 r2) - (and (eq r1 exempt.roleattr) - (neq t1 constrained.typeattr))) - (eq t1 exempt.subj.typeattr)) - (eq t2 exempt.obj.typeattr)) - (and (eq r2 exempt.roleattr) (eq t2 typeattr))) - (and - (eq t1 readstatesource.typeattr) - (eq t2 readstatetarget.typeattr)))) - - (constrain - (process (getrlimit getsched ptrace setrlimit setsched sigchld sigkill - signal signull sigstop)) - (or (or (or (eq r1 r2) - (and (eq r1 exempt.roleattr) (neq t1 constrained.typeattr))) - (eq t1 exempt.subj.typeattr)) - (and (eq t1 exemptsource.typeattr) (eq t2 exempttarget.typeattr)))) - - (macro type ((type ARG1)) - (typeattributeset typeattr ARG1)) - - (typeattribute typeattr) - - (block constrained + (constrain (fifo_file (append getattr read setattr write)) + (or (or (or (or (eq r1 r2) + (and (eq r1 exempt.roleattr) + (neq t1 constrained.typeattr))) + (eq t1 exempt.subj.typeattr)) + (eq t2 exempt.obj.typeattr)) + (and (eq t1 exemptsource.typeattr) + (eq t2 exempttarget.typeattr)))) + + (constrain (constrainobject (append setattr write)) + (or (or (or (eq r1 r2) + (and (eq r1 exempt.roleattr) + (neq t1 constrained.typeattr))) + (eq t1 exempt.subj.typeattr)) + (eq t2 exempt.obj.typeattr))) + + (constrain (constrainobject (getattr read)) + (or (or (or (or (or (eq r1 r2) + (and (eq r1 exempt.roleattr) + (neq t1 constrained.typeattr))) + (eq t1 exempt.subj.typeattr)) + (eq t2 exempt.obj.typeattr)) + (and (eq r2 exempt.roleattr) (eq t2 typeattr))) + (and + (eq t1 readstatesource.typeattr) + (eq t2 readstatetarget.typeattr)))) + + (constrain + (process (getrlimit getsched ptrace setrlimit setsched sigchld sigkill + signal signull sigstop)) + (or (or (or (eq r1 r2) + (and (eq r1 exempt.roleattr) (neq t1 constrained.typeattr))) + (eq t1 exempt.subj.typeattr)) + (and (eq t1 exemptsource.typeattr) (eq t2 exempttarget.typeattr)))) (macro type ((type ARG1)) - (typeattributeset typeattr ARG1)) + (typeattributeset typeattr ARG1)) - (typeattribute typeattr)) + (typeattribute typeattr) - (block exempt + (block constrained - (macro role ((role ARG1)) - (roleattributeset roleattr ARG1)) + (macro type ((type ARG1)) + (typeattributeset typeattr ARG1)) - (roleattribute roleattr) + (typeattribute typeattr)) - (block obj + (block exempt - (macro type ((type ARG1)) - (typeattributeset typeattr ARG1)) + (macro role ((role ARG1)) + (roleattributeset roleattr ARG1)) - (typeattribute typeattr)) + (roleattribute roleattr) - (block subj + (block obj - (macro type ((type ARG1)) - (typeattributeset typeattr ARG1)) + (macro type ((type ARG1)) + (typeattributeset typeattr ARG1)) - (typeattribute typeattr))) + (typeattribute typeattr)) - (block exemptsource + (block subj - (macro type ((type ARG1)) - (typeattributeset typeattr ARG1)) + (macro type ((type ARG1)) + (typeattributeset typeattr ARG1)) - (typeattribute typeattr)) + (typeattribute typeattr))) - (block exempttarget + (block exemptsource - (macro type ((type ARG1)) - (typeattributeset typeattr ARG1)) + (macro type ((type ARG1)) + (typeattributeset typeattr ARG1)) - (typeattribute typeattr)) + (typeattribute typeattr)) - (block readstatesource + (block exempttarget - (macro type ((type ARG1)) - (typeattributeset typeattr ARG1)) + (macro type ((type ARG1)) + (typeattributeset typeattr ARG1)) - (typeattribute typeattr)) + (typeattribute typeattr)) - (block readstatetarget + (block readstatesource - (macro type ((type ARG1)) - (typeattributeset typeattr ARG1)) + (macro type ((type ARG1)) + (typeattributeset typeattr ARG1)) + + (typeattribute typeattr)) + + (block readstatetarget + + (macro type ((type ARG1)) + (typeattributeset typeattr ARG1)) - (typeattribute typeattr))) + (typeattribute typeattr))) (in obj |