diff options
Diffstat (limited to 'src/dev/nodedev.cil')
| -rw-r--r-- | src/dev/nodedev.cil | 138 |
1 files changed, 69 insertions, 69 deletions
diff --git a/src/dev/nodedev.cil b/src/dev/nodedev.cil index 9f15845..831b79d 100644 --- a/src/dev/nodedev.cil +++ b/src/dev/nodedev.cil @@ -1,119 +1,119 @@ -;; SPDX-FileCopyrightText: © 2025 Dominick Grift <dominick.grift@defensec.nl> +;; SPDX-FileCopyrightText: M-BM-) 2025 Dominick Grift <dominick.grift@defensec.nl> ;; SPDX-License-Identifier: Unlicense (block nodedev - (macro mounton_all_chr_files ((type ARG1)) - (allow ARG1 typeattr mounton_chr_file)) + (macro mounton_all_chr_files ((type ARG1)) + (allow ARG1 typeattr mounton_chr_file)) - (macro type ((type ARG1)) - (typeattributeset typeattr ARG1)) + (macro type ((type ARG1)) + (typeattributeset typeattr ARG1)) - (typeattribute typeattr) + (typeattribute typeattr) - (blockinherit .file.all_macro_template_chr_files) + (blockinherit .file.all_macro_template_chr_files) - (call .dev.type (typeattr)) + (call .dev.type (typeattr)) - (block base_template + (block base_template - (blockabstract base_template) + (blockabstract base_template) - (context nodedev_context (.sys.id .sys.role nodedev .sys.lowlow)) + (context nodedev_context (.sys.id .sys.role nodedev .sys.lowlow)) - (type nodedev) - (call .nodedev.type (nodedev))) + (type nodedev) + (call .nodedev.type (nodedev))) - (block except + (block except - (macro type ((type ARG1)) - (typeattributeset typeattr ARG1)) + (macro type ((type ARG1)) + (typeattributeset typeattr ARG1)) - (blockinherit file.all_macro_template_chr_files) + (blockinherit file.all_macro_template_chr_files) - (typeattribute typeattr) + (typeattribute typeattr) - (typeattributeset typeattr - (and nodedev.typeattr (not (exception.typeattr))))) + (typeattributeset typeattr + (and nodedev.typeattr (not (exception.typeattr))))) - (block exception + (block exception - (macro type ((type ARG1)) - (typeattributeset typeattr ARG1)) + (macro type ((type ARG1)) + (typeattributeset typeattr ARG1)) - (typeattribute typeattr) + (typeattribute typeattr) - (call nodedev.type (typeattr)) + (call nodedev.type (typeattr)) - (call .dev.exception.type (typeattr))) + (call .dev.exception.type (typeattr))) - (block macro_template_chr_files + (block macro_template_chr_files - (blockabstract macro_template_chr_files) + (blockabstract macro_template_chr_files) - (macro append_nodedev_chr_files ((type ARG1)) - (allow ARG1 nodedev append_chr_file)) + (macro append_nodedev_chr_files ((type ARG1)) + (allow ARG1 nodedev append_chr_file)) - (macro appendinherited_nodedev_chr_files ((type ARG1)) - (allow ARG1 nodedev appendinherited_chr_file)) + (macro appendinherited_nodedev_chr_files ((type ARG1)) + (allow ARG1 nodedev appendinherited_chr_file)) - (macro create_nodedev_chr_files ((type ARG1)) - (allow ARG1 nodedev create_chr_file)) + (macro create_nodedev_chr_files ((type ARG1)) + (allow ARG1 nodedev create_chr_file)) - (macro delete_nodedev_chr_files ((type ARG1)) - (allow ARG1 nodedev delete_chr_file)) + (macro delete_nodedev_chr_files ((type ARG1)) + (allow ARG1 nodedev delete_chr_file)) - (macro manage_nodedev_chr_files ((type ARG1)) - (allow ARG1 nodedev manage_chr_file)) + (macro manage_nodedev_chr_files ((type ARG1)) + (allow ARG1 nodedev manage_chr_file)) - (macro mapexecute_nodedev_chr_files ((type ARG1)) - (allow ARG1 nodedev mapexecute_chr_file)) + (macro mapexecute_nodedev_chr_files ((type ARG1)) + (allow ARG1 nodedev mapexecute_chr_file)) - (macro read_nodedev_chr_files ((type ARG1)) - (allow ARG1 nodedev read_chr_file)) + (macro read_nodedev_chr_files ((type ARG1)) + (allow ARG1 nodedev read_chr_file)) - (macro readinherited_nodedev_chr_files ((type ARG1)) - (allow ARG1 nodedev readinherited_chr_file)) + (macro readinherited_nodedev_chr_files ((type ARG1)) + (allow ARG1 nodedev readinherited_chr_file)) - (macro readwrite_nodedev_chr_files ((type ARG1)) - (allow ARG1 nodedev readwrite_chr_file)) + (macro readwrite_nodedev_chr_files ((type ARG1)) + (allow ARG1 nodedev readwrite_chr_file)) - (macro readwriteinherited_nodedev_chr_files ((type ARG1)) - (allow ARG1 nodedev readwriteinherited_chr_file)) + (macro readwriteinherited_nodedev_chr_files ((type ARG1)) + (allow ARG1 nodedev readwriteinherited_chr_file)) - (macro relabel_nodedev_chr_files ((type ARG1)) - (allow ARG1 nodedev relabel_chr_file)) + (macro relabel_nodedev_chr_files ((type ARG1)) + (allow ARG1 nodedev relabel_chr_file)) - (macro relabelfrom_nodedev_chr_files ((type ARG1)) - (allow ARG1 nodedev relabelfrom_chr_file)) + (macro relabelfrom_nodedev_chr_files ((type ARG1)) + (allow ARG1 nodedev relabelfrom_chr_file)) - (macro relabelto_nodedev_chr_files ((type ARG1)) - (allow ARG1 nodedev relabelto_chr_file)) + (macro relabelto_nodedev_chr_files ((type ARG1)) + (allow ARG1 nodedev relabelto_chr_file)) - (macro rename_nodedev_chr_files ((type ARG1)) - (allow ARG1 nodedev rename_chr_file)) + (macro rename_nodedev_chr_files ((type ARG1)) + (allow ARG1 nodedev rename_chr_file)) - (macro write_nodedev_chr_files ((type ARG1)) - (allow ARG1 nodedev write_chr_file)) + (macro write_nodedev_chr_files ((type ARG1)) + (allow ARG1 nodedev write_chr_file)) - (macro writeinherited_nodedev_chr_files ((type ARG1)) - (allow ARG1 nodedev writeinherited_chr_file))) + (macro writeinherited_nodedev_chr_files ((type ARG1)) + (allow ARG1 nodedev writeinherited_chr_file))) - (block template + (block template - (blockabstract template) + (blockabstract template) - (blockinherit .nodedev.base_template) - (blockinherit .nodedev.macro_template_chr_files)) + (blockinherit .nodedev.base_template) + (blockinherit .nodedev.macro_template_chr_files)) - (block unconfined + (block unconfined - (macro type ((type ARG1)) - (typeattributeset typeattr ARG1)) + (macro type ((type ARG1)) + (typeattributeset typeattr ARG1)) - (typeattribute typeattr) + (typeattribute typeattr) - (allow typeattr nodedev.typeattr (chr_file (not (audit_access execmod)))))) + (allow typeattr nodedev.typeattr (chr_file (not (audit_access execmod)))))) (in dev.unconfined |