summaryrefslogtreecommitdiff
path: root/src/misc.cil
diff options
context:
space:
mode:
Diffstat (limited to 'src/misc.cil')
-rw-r--r--src/misc.cil230
1 files changed, 115 insertions, 115 deletions
diff --git a/src/misc.cil b/src/misc.cil
index 6330878..dbb8148 100644
--- a/src/misc.cil
+++ b/src/misc.cil
@@ -1,4 +1,4 @@
-;; SPDX-FileCopyrightText: © 2025 Dominick Grift <dominick.grift@defensec.nl>
+;; SPDX-FileCopyrightText: M-BM-) 2025 Dominick Grift <dominick.grift@defensec.nl>
;; SPDX-License-Identifier: Unlicense
(sidcontext init (sys.id sys.role sys.subj sys.lowlow)) ;; userspace_initial_context
@@ -19,10 +19,10 @@
(filecon "/tmp" symlink file_context)
(macro root_file_type_transition_file ((type ARG1))
- (call .root.file_type_transition
- (ARG1 file dir "opt"))
- (call .root.file_type_transition
- (ARG1 file dir "usr"))))
+ (call .root.file_type_transition
+ (ARG1 file dir "opt"))
+ (call .root.file_type_transition
+ (ARG1 file dir "usr"))))
(in db
@@ -30,8 +30,8 @@
(filecon "/var/db/.*" any file_context)
(macro var_file_type_transition_file ((type ARG1))
- (call .var.file_type_transition
- (ARG1 file dir "db"))))
+ (call .var.file_type_transition
+ (ARG1 file dir "db"))))
(in debug
@@ -50,8 +50,8 @@
(filecon "/dev/.*" symlink file_context)
(macro root_file_type_transition_file ((type ARG1))
- (call .root.file_type_transition
- (ARG1 file dir "dev")))
+ (call .root.file_type_transition
+ (ARG1 file dir "dev")))
(call .tmp.associate_fs (typeattr))
@@ -77,12 +77,12 @@
(filecon "/efi/.*" any ())
(macro boot_file_type_transition_fs ((type ARG1))
- (call .boot.file_type_transition
- (ARG1 fs dir "efi")))
+ (call .boot.file_type_transition
+ (ARG1 fs dir "efi")))
(macro root_file_type_transition_fs ((type ARG1))
- (call .root.file_type_transition
- (ARG1 fs dir "efi")))
+ (call .root.file_type_transition
+ (ARG1 fs dir "efi")))
(call .xattr.associate_fs (fs)))
@@ -97,18 +97,18 @@
(filecon "/usr/bin/.*" any file_context)
(macro data_file_type_transition_file ((type ARG1))
- (call .data.file_type_transition
- (ARG1 file dir "bin"))
- (call .data.file_type_transition
- (ARG1 file dir "libexec"))
- (call .data.file_type_transition
- (ARG1 file dir "sbin")))
+ (call .data.file_type_transition
+ (ARG1 file dir "bin"))
+ (call .data.file_type_transition
+ (ARG1 file dir "libexec"))
+ (call .data.file_type_transition
+ (ARG1 file dir "sbin")))
(macro root_file_type_transition_file ((type ARG1))
- (call .root.file_type_transition
- (ARG1 file dir "bin"))
- (call .root.file_type_transition
- (ARG1 file dir "sbin"))))
+ (call .root.file_type_transition
+ (ARG1 file dir "bin"))
+ (call .root.file_type_transition
+ (ARG1 file dir "sbin"))))
(in file.run
@@ -185,8 +185,8 @@
(filecon "/home/.*" any file_context)
(macro root_file_type_transition_file ((type ARG1))
- (call .root.file_type_transition
- (ARG1 file dir "home"))))
+ (call .root.file_type_transition
+ (ARG1 file dir "home"))))
(in hugetlb
@@ -201,16 +201,16 @@
(filecon "/usr/lib/.*" any file_context)
(macro data_file_type_transition_file ((type ARG1))
- (call .data.file_type_transition
- (ARG1 file dir "lib"))
- (call .data.file_type_transition
- (ARG1 file dir "lib64")))
+ (call .data.file_type_transition
+ (ARG1 file dir "lib"))
+ (call .data.file_type_transition
+ (ARG1 file dir "lib64")))
(macro root_file_type_transition_file ((type ARG1))
- (call .root.file_type_transition
- (ARG1 file dir "lib"))
- (call .root.file_type_transition
- (ARG1 file dir "lib64"))))
+ (call .root.file_type_transition
+ (ARG1 file dir "lib"))
+ (call .root.file_type_transition
+ (ARG1 file dir "lib64"))))
(in log
@@ -218,8 +218,8 @@
(filecon "/var/log/.*" any file_context)
(macro var_file_type_transition_file ((type ARG1))
- (call .var.file_type_transition
- (ARG1 file dir "log")))
+ (call .var.file_type_transition
+ (ARG1 file dir "log")))
(call .tmp.associate_fs (file)))
@@ -280,56 +280,56 @@
(filecon "/var/tmp/lost\+found" dir file_context)
(macro boot_file_type_transition_file ((type ARG1))
- (call .boot.file_type_transition
- (ARG1 file dir "lost+found")))
+ (call .boot.file_type_transition
+ (ARG1 file dir "lost+found")))
(macro cache_file_type_transition_file ((type ARG1))
- (call .cache.file_type_transition
- (ARG1 file dir "lost+found")))
+ (call .cache.file_type_transition
+ (ARG1 file dir "lost+found")))
(macro conf_file_type_transition_file ((type ARG1))
- (call .conf.file_type_transition
- (ARG1 file dir "lost+found")))
+ (call .conf.file_type_transition
+ (ARG1 file dir "lost+found")))
(macro data_file_type_transition_file ((type ARG1))
- (call .data.file_type_transition
- (ARG1 file dir "lost+found")))
+ (call .data.file_type_transition
+ (ARG1 file dir "lost+found")))
(macro db_file_type_transition_file ((type ARG1))
- (call .db.file_type_transition
- (ARG1 file dir "lost+found")))
+ (call .db.file_type_transition
+ (ARG1 file dir "lost+found")))
(macro home_file_type_transition_file ((type ARG1))
- (call .home.file_type_transition
- (ARG1 file dir "lost+found")))
+ (call .home.file_type_transition
+ (ARG1 file dir "lost+found")))
(macro log_file_type_transition_file ((type ARG1))
- (call .log.file_type_transition
- (ARG1 file dir "lost+found")))
+ (call .log.file_type_transition
+ (ARG1 file dir "lost+found")))
(macro root_file_type_transition_file ((type ARG1))
- (call .root.file_type_transition
- (ARG1 file dir "lost+found")))
+ (call .root.file_type_transition
+ (ARG1 file dir "lost+found")))
(macro run_file_type_transition_file ((type ARG1))
- (call .run.file_type_transition
- (ARG1 file dir "lost+found")))
+ (call .run.file_type_transition
+ (ARG1 file dir "lost+found")))
(macro spool_file_type_transition_file ((type ARG1))
- (call .spool.file_type_transition
- (ARG1 file dir "lost+found")))
+ (call .spool.file_type_transition
+ (ARG1 file dir "lost+found")))
(macro state_file_type_transition_file ((type ARG1))
- (call .state.file_type_transition
- (ARG1 file dir "lost+found")))
+ (call .state.file_type_transition
+ (ARG1 file dir "lost+found")))
(macro tmp_file_type_transition_file ((type ARG1))
- (call .tmp.file_type_transition
- (ARG1 file dir "lost+found")))
+ (call .tmp.file_type_transition
+ (ARG1 file dir "lost+found")))
(macro var_file_type_transition_file ((type ARG1))
- (call .var.file_type_transition
- (ARG1 file dir "lost+found"))))
+ (call .var.file_type_transition
+ (ARG1 file dir "lost+found"))))
(in mail.spool
@@ -337,12 +337,12 @@
(filecon "/var/spool/mail/.*" any file_context)
(macro spool_file_type_transition_file ((type ARG1))
- (call .spool.file_type_transition
- (ARG1 file dir "mail")))
+ (call .spool.file_type_transition
+ (ARG1 file dir "mail")))
(macro var_file_type_transition_file ((type ARG1))
- (call .var.file_type_transition
- (ARG1 file dir "mail"))))
+ (call .var.file_type_transition
+ (ARG1 file dir "mail"))))
(in media
@@ -357,14 +357,14 @@
(filecon "/run/media/.*" any ())
(macro root_file_type_transition_file ((type ARG1))
- (call .root.file_type_transition
- (ARG1 file dir "media"))
- (call .root.file_type_transition
- (ARG1 file dir "mnt")))
+ (call .root.file_type_transition
+ (ARG1 file dir "media"))
+ (call .root.file_type_transition
+ (ARG1 file dir "mnt")))
(macro run_file_type_transition_file ((type ARG1))
- (call .run.file_type_transition
- (ARG1 file dir "media")))
+ (call .run.file_type_transition
+ (ARG1 file dir "media")))
(call .tmp.associate_fs (file)))
@@ -374,8 +374,8 @@
(filecon "/usr/lib/modules/.*" any file_context)
(macro lib_file_type_transition_file ((type ARG1))
- (call .lib.file_type_transition
- (ARG1 file dir "modules"))))
+ (call .lib.file_type_transition
+ (ARG1 file dir "modules"))))
(in mqueue
@@ -390,8 +390,8 @@
(filecon "/proc/.*" any ())
(macro root_file_type_transition_fs ((type ARG1))
- (call .root.file_type_transition
- (ARG1 fs dir "proc")))
+ (call .root.file_type_transition
+ (ARG1 fs dir "proc")))
(call .xattr.associate_fs (fs)))
@@ -418,12 +418,12 @@
(filecon "/run/.*" any file_context)
(macro root_file_type_transition_file ((type ARG1))
- (call .root.file_type_transition
- (ARG1 file dir "run")))
+ (call .root.file_type_transition
+ (ARG1 file dir "run")))
(macro var_file_type_transition_file ((type ARG1))
- (call .var.file_type_transition
- (ARG1 file dir "run")))
+ (call .var.file_type_transition
+ (ARG1 file dir "run")))
(call .root.associate_fs (file)))
@@ -435,12 +435,12 @@
(filecon "/run/lock/subsys" dir file_context)
(macro run_file_type_transition_file ((type ARG1))
- (call .run.file_type_transition
- (ARG1 file dir "lock")))
+ (call .run.file_type_transition
+ (ARG1 file dir "lock")))
(macro var_file_type_transition_file ((type ARG1))
- (call .var.file_type_transition
- (ARG1 file dir "lock"))))
+ (call .var.file_type_transition
+ (ARG1 file dir "lock"))))
(in runuser
@@ -448,8 +448,8 @@
(filecon "/run/user/.*" any file_context)
(macro run_file_type_transition_file ((type ARG1))
- (call .run.file_type_transition
- (ARG1 file dir "user"))))
+ (call .run.file_type_transition
+ (ARG1 file dir "user"))))
(in security
@@ -467,8 +467,8 @@
(filecon "/var/spool/.*" any file_context)
(macro var_file_type_transition_file ((type ARG1))
- (call .var.file_type_transition
- (ARG1 file dir "spool"))))
+ (call .var.file_type_transition
+ (ARG1 file dir "spool"))))
(in src
@@ -476,8 +476,8 @@
(filecon "/usr/src/.*" any file_context)
(macro data_file_type_transition_file ((type ARG1))
- (call .data.file_type_transition
- (ARG1 file dir "src"))))
+ (call .data.file_type_transition
+ (ARG1 file dir "src"))))
(in state
@@ -485,8 +485,8 @@
(filecon "/var/lib/.*" any file_context)
(macro var_file_type_transition_file ((type ARG1))
- (call .var.file_type_transition
- (ARG1 file dir "lib")))
+ (call .var.file_type_transition
+ (ARG1 file dir "lib")))
(call .root.associate_fs (file)))
@@ -496,8 +496,8 @@
(filecon "/sys/.*" any ())
(macro root_file_type_transition_fs ((type ARG1))
- (call .root.file_type_transition
- (ARG1 fs dir "sys")))
+ (call .root.file_type_transition
+ (ARG1 fs dir "sys")))
(allow fs self (filesystem (associate)))
@@ -527,32 +527,32 @@
(filecon "/root/.*" any file_context)
(macro root_file_type_transition_file ((type ARG1))
- (call .root.fs_type_transition
- (ARG1 file dir "root"))))
+ (call .root.fs_type_transition
+ (ARG1 file dir "root"))))
(in sys.hugetlbfs
(macro hugetlb_fs_type_transition_file ((type ARG1)(name ARG2))
- (call .hugetlb.fs_type_transition
- (ARG1 file file ARG2))))
+ (call .hugetlb.fs_type_transition
+ (ARG1 file file ARG2))))
(in sys.mqueuefs
(macro mqueue_fs_type_transition_file ((type ARG1)(name ARG2))
- (call .mqueue.fs_type_transition
- (ARG1 file file ARG2))))
+ (call .mqueue.fs_type_transition
+ (ARG1 file file ARG2))))
(in sys.tmp
(macro tmp_file_type_transition_file ((type ARG1)(class ARG2)(name ARG3))
- (call .tmp.file_type_transition
- (ARG1 file ARG2 ARG3))))
+ (call .tmp.file_type_transition
+ (ARG1 file ARG2 ARG3))))
(in sys.tmpfs
(macro tmp_fs_type_transition_file ((type ARG1)(class ARG2)(name ARG3))
- (call .tmp.fs_type_transition
- (ARG1 file ARG2 ARG3))))
+ (call .tmp.fs_type_transition
+ (ARG1 file ARG2 ARG3))))
(in sys.unconfined
@@ -580,20 +580,20 @@
(filecon "/tmp/\.XIM-unix/.*" any ())
(macro data_file_type_transition_file ((type ARG1))
- (call .data.file_type_transition
- (ARG1 file dir "tmp")))
+ (call .data.file_type_transition
+ (ARG1 file dir "tmp")))
(macro root_file_type_transition_file ((type ARG1))
- (call .root.file_type_transition
- (ARG1 file dir "tmp")))
+ (call .root.file_type_transition
+ (ARG1 file dir "tmp")))
(macro sys_tmp_file_type_transition_file ((type ARG1))
- (call .sys.tmp.file_type_transition
- (ARG1 file dir "tmp")))
+ (call .sys.tmp.file_type_transition
+ (ARG1 file dir "tmp")))
(macro var_file_type_transition_file ((type ARG1))
- (call .var.file_type_transition
- (ARG1 file dir "tmp")))
+ (call .var.file_type_transition
+ (ARG1 file dir "tmp")))
(allow fs self (filesystem (associate)))
@@ -618,10 +618,10 @@
(filecon "/var/spool/mail" symlink file_context)
(macro root_file_type_transition_file ((type ARG1))
- (call .root.file_type_transition
- (ARG1 file dir "srv"))
- (call .root.file_type_transition
- (ARG1 file dir "var"))))
+ (call .root.file_type_transition
+ (ARG1 file dir "srv"))
+ (call .root.file_type_transition
+ (ARG1 file dir "var"))))
(typealias dpkg_script_t)
(in sys (typealiasactual dpkg_script_t subj))
generated by cgit v1.2.3 (git 2.46.0) at 2025-09-20 14:48:06 +0000