summaryrefslogtreecommitdiff
path: root/src/net/portnet/ephemeralportnet.cil
diff options
context:
space:
mode:
authorDominick Grift <dominick.grift@defensec.nl>2023-08-20 15:44:41 +0200
committerDominick Grift <dominick.grift@defensec.nl>2023-08-20 15:46:23 +0200
commit0c187b6ff97f91c41dab65a6426dc61f77305cdf (patch)
tree1e35f5851154500a8a39428a45a5671f9488e1da /src/net/portnet/ephemeralportnet.cil
downloadselinux-policy-0c187b6ff97f91c41dab65a6426dc61f77305cdf.tar.gz
Import dssp5
Signed-off-by: Dominick Grift <dominick.grift@defensec.nl>
Diffstat (limited to 'src/net/portnet/ephemeralportnet.cil')
-rw-r--r--src/net/portnet/ephemeralportnet.cil39
1 files changed, 39 insertions, 0 deletions
diff --git a/src/net/portnet/ephemeralportnet.cil b/src/net/portnet/ephemeralportnet.cil
new file mode 100644
index 0000000..d49ca15
--- /dev/null
+++ b/src/net/portnet/ephemeralportnet.cil
@@ -0,0 +1,39 @@
+;; SPDX-FileCopyrightText: © 2023 Dominick Grift <dominick.grift@defensec.nl>
+;; SPDX-License-Identifier: Unlicense
+
+(block ephemeral
+
+ (portcon "dccp" (32768 60999) port_context)
+ (portcon "sctp" (32768 60999) port_context)
+ (portcon "tcp" (32768 60999) port_context)
+ (portcon "udp" (32768 60999) port_context)
+
+ (blockinherit .net.port.ephemeral.template))
+
+(in net.port
+
+ (block ephemeral
+
+ (macro type ((type ARG1))
+ (typeattributeset typeattr ARG1))
+
+ (blockinherit .net.port.all_macro_template)
+
+ (typeattribute typeattr)
+
+ (call .net.port.type (typeattr))
+
+ (block base_template
+
+ (blockabstract base_template)
+
+ (blockinherit .net.port.base_template)
+
+ (call .net.port.ephemeral.type (port)))
+
+ (block template
+
+ (blockabstract template)
+
+ (blockinherit .net.port.ephemeral.base_template)
+ (blockinherit .net.port.macro_template))))