diff options
Diffstat (limited to 'src/net/nodenet.cil')
| -rw-r--r-- | src/net/nodenet.cil | 150 |
1 files changed, 75 insertions, 75 deletions
diff --git a/src/net/nodenet.cil b/src/net/nodenet.cil index 2f1fc55..dec1baa 100644 --- a/src/net/nodenet.cil +++ b/src/net/nodenet.cil @@ -1,4 +1,4 @@ -;; SPDX-FileCopyrightText: © 2025 Dominick Grift <dominick.grift@defensec.nl> +;; SPDX-FileCopyrightText: M-BM-) 2025 Dominick Grift <dominick.grift@defensec.nl> ;; SPDX-License-Identifier: Unlicense (sidcontext node (sys.id sys.role net.netnode sys.lowlow)) @@ -7,18 +7,18 @@ (classorder (unordered node)) (macro recvfrom_invalid_nodes ((type ARG1)) - (allow ARG1 invalid (node (recvfrom)))) + (allow ARG1 invalid (node (recvfrom)))) (macro recvfromsendto_invalid_nodes ((type ARG1)) - (allow ARG1 invalid (node (recvfrom sendto)))) + (allow ARG1 invalid (node (recvfrom sendto)))) (macro sendto_invalid_nodes ((type ARG1)) - (allow ARG1 invalid (node (sendto)))) + (allow ARG1 invalid (node (sendto)))) (tunableif (or invalid_associations invalid_peers) - (true + (true - (call net.netnode.recvfromsendto_all_nodes (invalid)))) + (call net.netnode.recvfromsendto_all_nodes (invalid)))) (in invalid.unconfined @@ -27,10 +27,10 @@ (in mcs (mlsconstrain (node (recvfrom sendto)) - (or (dom h1 h2) - (and - (neq t1 constrained.typeattr) - (neq t2 constrained.typeattr))))) + (or (dom h1 h2) + (and + (neq t1 constrained.typeattr) + (neq t2 constrained.typeattr))))) (in net @@ -38,107 +38,107 @@ (block netnode - (macro type ((type ARG1)) - (typeattributeset typeattr ARG1)) + (macro type ((type ARG1)) + (typeattributeset typeattr ARG1)) - (typeattribute typeattr) + (typeattribute typeattr) - (blockinherit all_macro_template) + (blockinherit all_macro_template) - (call .obj.type (typeattr)) + (call .obj.type (typeattr)) - (block all_macro_template + (block all_macro_template - (blockabstract all_macro_template) + (blockabstract all_macro_template) - (macro nodebind_all_dccp_sockets ((type ARG1)) - (allow ARG1 typeattr (dccp_socket (node_bind)))) + (macro nodebind_all_dccp_sockets ((type ARG1)) + (allow ARG1 typeattr (dccp_socket (node_bind)))) - (macro nodebind_all_icmp_sockets ((type ARG1)) - (allow ARG1 typeattr (icmp_socket (node_bind)))) + (macro nodebind_all_icmp_sockets ((type ARG1)) + (allow ARG1 typeattr (icmp_socket (node_bind)))) - (macro nodebind_all_rawip_sockets ((type ARG1)) - (allow ARG1 typeattr (rawip_socket (node_bind)))) + (macro nodebind_all_rawip_sockets ((type ARG1)) + (allow ARG1 typeattr (rawip_socket (node_bind)))) - (macro nodebind_all_sctp_sockets ((type ARG1)) - (allow ARG1 typeattr (sctp_socket (node_bind)))) + (macro nodebind_all_sctp_sockets ((type ARG1)) + (allow ARG1 typeattr (sctp_socket (node_bind)))) - (macro nodebind_all_tcp_sockets ((type ARG1)) - (allow ARG1 typeattr (tcp_socket (node_bind)))) + (macro nodebind_all_tcp_sockets ((type ARG1)) + (allow ARG1 typeattr (tcp_socket (node_bind)))) - (macro nodebind_all_udp_sockets ((type ARG1)) - (allow ARG1 typeattr (udp_socket (node_bind)))) + (macro nodebind_all_udp_sockets ((type ARG1)) + (allow ARG1 typeattr (udp_socket (node_bind)))) - (macro recvfrom_all_nodes ((type ARG1)) - (allow ARG1 typeattr (node (recvfrom)))) + (macro recvfrom_all_nodes ((type ARG1)) + (allow ARG1 typeattr (node (recvfrom)))) - (macro recvfromsendto_all_nodes ((type ARG1)) - (allow ARG1 typeattr (node (recvfrom sendto)))) + (macro recvfromsendto_all_nodes ((type ARG1)) + (allow ARG1 typeattr (node (recvfrom sendto)))) - (macro sendto_all_nodes ((type ARG1)) - (allow ARG1 typeattr (node (sendto))))) + (macro sendto_all_nodes ((type ARG1)) + (allow ARG1 typeattr (node (sendto))))) - (block base_template + (block base_template - (blockabstract base_template) + (blockabstract base_template) - (context netnode_context (.sys.id .sys.role netnode .sys.lowlow)) + (context netnode_context (.sys.id .sys.role netnode .sys.lowlow)) - (type netnode) - (call .net.netnode.type (netnode))) + (type netnode) + (call .net.netnode.type (netnode))) - (block macro_template + (block macro_template - (blockabstract macro_template) + (blockabstract macro_template) - (macro nodebind_netnode_dccp_sockets ((type ARG1)) - (allow ARG1 netnode (dccp_socket (node_bind)))) + (macro nodebind_netnode_dccp_sockets ((type ARG1)) + (allow ARG1 netnode (dccp_socket (node_bind)))) - (macro nodebind_netnode_icmp_sockets ((type ARG1)) - (allow ARG1 netnode (icmp_socket (node_bind)))) + (macro nodebind_netnode_icmp_sockets ((type ARG1)) + (allow ARG1 netnode (icmp_socket (node_bind)))) - (macro nodebind_netnode_rawip_sockets ((type ARG1)) - (allow ARG1 netnode (rawip_socket (node_bind)))) + (macro nodebind_netnode_rawip_sockets ((type ARG1)) + (allow ARG1 netnode (rawip_socket (node_bind)))) - (macro nodebind_netnode_sctp_sockets ((type ARG1)) - (allow ARG1 netnode (sctp_socket (node_bind)))) + (macro nodebind_netnode_sctp_sockets ((type ARG1)) + (allow ARG1 netnode (sctp_socket (node_bind)))) - (macro nodebind_netnode_tcp_sockets ((type ARG1)) - (allow ARG1 netnode (tcp_socket (node_bind)))) + (macro nodebind_netnode_tcp_sockets ((type ARG1)) + (allow ARG1 netnode (tcp_socket (node_bind)))) - (macro nodebind_netnode_udp_sockets ((type ARG1)) - (allow ARG1 netnode (udp_socket (node_bind)))) + (macro nodebind_netnode_udp_sockets ((type ARG1)) + (allow ARG1 netnode (udp_socket (node_bind)))) - (macro recvfrom_nodes ((type ARG1)) - (allow ARG1 netnode (node (recvfrom)))) + (macro recvfrom_nodes ((type ARG1)) + (allow ARG1 netnode (node (recvfrom)))) - (macro recvfromsendto_nodes ((type ARG1)) - (allow ARG1 netnode (node (recvfrom sendto)))) + (macro recvfromsendto_nodes ((type ARG1)) + (allow ARG1 netnode (node (recvfrom sendto)))) - (macro sendto_nodes ((type ARG1)) - (allow ARG1 netnode (node (sendto))))) + (macro sendto_nodes ((type ARG1)) + (allow ARG1 netnode (node (sendto))))) - (block template + (block template - (blockabstract template) + (blockabstract template) - (blockinherit .net.netnode.base_template) - (blockinherit .net.netnode.macro_template)) + (blockinherit .net.netnode.base_template) + (blockinherit .net.netnode.macro_template)) - (block unconfined + (block unconfined - (macro type ((type ARG1)) - (typeattributeset typeattr ARG1)) + (macro type ((type ARG1)) + (typeattributeset typeattr ARG1)) - (typeattribute typeattr) + (typeattribute typeattr) - (allow typeattr netnode.typeattr (dccp_socket (node_bind))) - (allow typeattr netnode.typeattr (icmp_socket (node_bind))) - (allow typeattr netnode.typeattr (node (all))) - (allow typeattr netnode.typeattr (rawip_socket (node_bind))) - (allow typeattr netnode.typeattr (sctp_socket (node_bind))) - (allow typeattr netnode.typeattr (tcp_socket (node_bind))) - (allow typeattr netnode.typeattr (udp_socket (node_bind)))))) + (allow typeattr netnode.typeattr (dccp_socket (node_bind))) + (allow typeattr netnode.typeattr (icmp_socket (node_bind))) + (allow typeattr netnode.typeattr (node (all))) + (allow typeattr netnode.typeattr (rawip_socket (node_bind))) + (allow typeattr netnode.typeattr (sctp_socket (node_bind))) + (allow typeattr netnode.typeattr (tcp_socket (node_bind))) + (allow typeattr netnode.typeattr (udp_socket (node_bind)))))) (in net.unconfined |