diff options
author | Dominick Grift <dominick.grift@defensec.nl> | 2023-08-20 15:44:41 +0200 |
---|---|---|
committer | Dominick Grift <dominick.grift@defensec.nl> | 2023-08-20 15:46:23 +0200 |
commit | 0c187b6ff97f91c41dab65a6426dc61f77305cdf (patch) | |
tree | 1e35f5851154500a8a39428a45a5671f9488e1da /src/net/portnet/ephemeralportnet.cil | |
download | selinux-policy-0c187b6ff97f91c41dab65a6426dc61f77305cdf.tar.gz |
Import dssp5
Signed-off-by: Dominick Grift <dominick.grift@defensec.nl>
Diffstat (limited to 'src/net/portnet/ephemeralportnet.cil')
-rw-r--r-- | src/net/portnet/ephemeralportnet.cil | 39 |
1 files changed, 39 insertions, 0 deletions
diff --git a/src/net/portnet/ephemeralportnet.cil b/src/net/portnet/ephemeralportnet.cil new file mode 100644 index 0000000..d49ca15 --- /dev/null +++ b/src/net/portnet/ephemeralportnet.cil @@ -0,0 +1,39 @@ +;; SPDX-FileCopyrightText: © 2023 Dominick Grift <dominick.grift@defensec.nl> +;; SPDX-License-Identifier: Unlicense + +(block ephemeral + + (portcon "dccp" (32768 60999) port_context) + (portcon "sctp" (32768 60999) port_context) + (portcon "tcp" (32768 60999) port_context) + (portcon "udp" (32768 60999) port_context) + + (blockinherit .net.port.ephemeral.template)) + +(in net.port + + (block ephemeral + + (macro type ((type ARG1)) + (typeattributeset typeattr ARG1)) + + (blockinherit .net.port.all_macro_template) + + (typeattribute typeattr) + + (call .net.port.type (typeattr)) + + (block base_template + + (blockabstract base_template) + + (blockinherit .net.port.base_template) + + (call .net.port.ephemeral.type (port))) + + (block template + + (blockabstract template) + + (blockinherit .net.port.ephemeral.base_template) + (blockinherit .net.port.macro_template)))) |