diff options
Diffstat (limited to 'src/misc/constrain/mcs.cil')
| -rw-r--r-- | src/misc/constrain/mcs.cil | 40 |
1 files changed, 20 insertions, 20 deletions
diff --git a/src/misc/constrain/mcs.cil b/src/misc/constrain/mcs.cil index 925933a..aaf7dc0 100644 --- a/src/misc/constrain/mcs.cil +++ b/src/misc/constrain/mcs.cil @@ -1,4 +1,4 @@ -;; SPDX-FileCopyrightText: © 2025 Dominick Grift <dominick.grift@defensec.nl> +;; SPDX-FileCopyrightText: M-BM-) 2025 Dominick Grift <dominick.grift@defensec.nl> ;; SPDX-License-Identifier: Unlicense (defaultrange blk_file source low) @@ -11,28 +11,28 @@ (block mcs - (mlsconstrain (constrainobject (create relabelto)) - (or (neq t1 constrained.typeattr) - (and (dom h1 h2) (eq l2 h2)))) + (mlsconstrain (constrainobject (create relabelto)) + (or (neq t1 constrained.typeattr) + (and (dom h1 h2) (eq l2 h2)))) - (mlsconstrain (constrainobject (append getattr read setattr write)) - (or (dom h1 h2) - (neq t1 constrained.typeattr))) + (mlsconstrain (constrainobject (append getattr read setattr write)) + (or (dom h1 h2) + (neq t1 constrained.typeattr))) - (mlsconstrain - (process (dyntransition getrlimit getsched ptrace setrlimit setsched - sigchld sigkill signal signull sigstop - transition)) - (or (dom h1 h2) - (neq t1 constrained.typeattr))) + (mlsconstrain + (process (dyntransition getrlimit getsched ptrace setrlimit setsched + sigchld sigkill signal signull sigstop + transition)) + (or (dom h1 h2) + (neq t1 constrained.typeattr))) - (mlsconstrain (fifo_file (append getattr read write setattr)) - (or (dom h1 h2) - (neq t1 constrained.typeattr))) + (mlsconstrain (fifo_file (append getattr read write setattr)) + (or (dom h1 h2) + (neq t1 constrained.typeattr))) - (block constrained + (block constrained - (macro type ((type ARG1)) - (typeattributeset typeattr ARG1)) + (macro type ((type ARG1)) + (typeattributeset typeattr ARG1)) - (typeattribute typeattr))) + (typeattribute typeattr))) |