summaryrefslogtreecommitdiff
path: root/src/net/portnet.cil
diff options
context:
space:
mode:
Diffstat (limited to 'src/net/portnet.cil')
-rw-r--r--src/net/portnet.cil130
1 files changed, 65 insertions, 65 deletions
diff --git a/src/net/portnet.cil b/src/net/portnet.cil
index 8547217..e1ea2b1 100644
--- a/src/net/portnet.cil
+++ b/src/net/portnet.cil
@@ -1,4 +1,4 @@
-;; SPDX-FileCopyrightText: © 2025 Dominick Grift <dominick.grift@defensec.nl>
+;; SPDX-FileCopyrightText: M-BM-) 2025 Dominick Grift <dominick.grift@defensec.nl>
;; SPDX-License-Identifier: Unlicense
(sidcontext port (sys.id sys.role net.port sys.lowlow))
@@ -9,106 +9,106 @@
(block port
- (macro type ((type ARG1))
- (typeattributeset typeattr ARG1))
+ (macro type ((type ARG1))
+ (typeattributeset typeattr ARG1))
- (typeattribute typeattr)
+ (typeattribute typeattr)
- (blockinherit all_macro_template)
+ (blockinherit all_macro_template)
- (call .obj.type (typeattr))
+ (call .obj.type (typeattr))
- (block all_macro_template
+ (block all_macro_template
- (blockabstract all_macro_template)
+ (blockabstract all_macro_template)
- (macro namebind_all_dccp_sockets ((type ARG1))
- (allow ARG1 typeattr (dccp_socket (name_bind))))
+ (macro namebind_all_dccp_sockets ((type ARG1))
+ (allow ARG1 typeattr (dccp_socket (name_bind))))
- (macro namebind_all_icmp_sockets ((type ARG1))
- (allow ARG1 typeattr (icmp_socket (name_bind))))
+ (macro namebind_all_icmp_sockets ((type ARG1))
+ (allow ARG1 typeattr (icmp_socket (name_bind))))
- (macro namebind_all_rawip_sockets ((type ARG1))
- (allow ARG1 typeattr (rawip_socket (name_bind))))
+ (macro namebind_all_rawip_sockets ((type ARG1))
+ (allow ARG1 typeattr (rawip_socket (name_bind))))
- (macro namebind_all_sctp_sockets ((type ARG1))
- (allow ARG1 typeattr (sctp_socket (name_bind))))
+ (macro namebind_all_sctp_sockets ((type ARG1))
+ (allow ARG1 typeattr (sctp_socket (name_bind))))
- (macro namebind_all_tcp_sockets ((type ARG1))
- (allow ARG1 typeattr (tcp_socket (name_bind))))
+ (macro namebind_all_tcp_sockets ((type ARG1))
+ (allow ARG1 typeattr (tcp_socket (name_bind))))
- (macro namebind_all_udp_sockets ((type ARG1))
- (allow ARG1 typeattr (udp_socket (name_bind))))
+ (macro namebind_all_udp_sockets ((type ARG1))
+ (allow ARG1 typeattr (udp_socket (name_bind))))
- (macro nameconnect_all_dccp_sockets ((type ARG1))
- (allow ARG1 typeattr (dccp_socket (name_connect))))
+ (macro nameconnect_all_dccp_sockets ((type ARG1))
+ (allow ARG1 typeattr (dccp_socket (name_connect))))
- (macro nameconnect_all_sctp_sockets ((type ARG1))
- (allow ARG1 typeattr (sctp_socket (name_connect))))
+ (macro nameconnect_all_sctp_sockets ((type ARG1))
+ (allow ARG1 typeattr (sctp_socket (name_connect))))
- (macro nameconnect_all_tcp_sockets ((type ARG1))
- (allow ARG1 typeattr (tcp_socket (name_connect)))))
+ (macro nameconnect_all_tcp_sockets ((type ARG1))
+ (allow ARG1 typeattr (tcp_socket (name_connect)))))
- (block base_template
+ (block base_template
- (blockabstract base_template)
+ (blockabstract base_template)
- (context port_context (.sys.id .sys.role port .sys.lowlow))
+ (context port_context (.sys.id .sys.role port .sys.lowlow))
- (type port)
- (call .net.port.type (port)))
+ (type port)
+ (call .net.port.type (port)))
- (block macro_template
+ (block macro_template
- (blockabstract macro_template)
+ (blockabstract macro_template)
- (macro namebind_port_dccp_sockets ((type ARG1))
- (allow ARG1 port (dccp_socket (name_bind))))
+ (macro namebind_port_dccp_sockets ((type ARG1))
+ (allow ARG1 port (dccp_socket (name_bind))))
- (macro namebind_port_icmp_sockets ((type ARG1))
- (allow ARG1 port (icmp_socket (name_bind))))
+ (macro namebind_port_icmp_sockets ((type ARG1))
+ (allow ARG1 port (icmp_socket (name_bind))))
- (macro namebind_port_rawip_sockets ((type ARG1))
- (allow ARG1 port (rawip_socket (name_bind))))
+ (macro namebind_port_rawip_sockets ((type ARG1))
+ (allow ARG1 port (rawip_socket (name_bind))))
- (macro namebind_port_sctp_sockets ((type ARG1))
- (allow ARG1 port (sctp_socket (name_bind))))
+ (macro namebind_port_sctp_sockets ((type ARG1))
+ (allow ARG1 port (sctp_socket (name_bind))))
- (macro namebind_port_tcp_sockets ((type ARG1))
- (allow ARG1 port (tcp_socket (name_bind))))
+ (macro namebind_port_tcp_sockets ((type ARG1))
+ (allow ARG1 port (tcp_socket (name_bind))))
- (macro namebind_port_udp_sockets ((type ARG1))
- (allow ARG1 port (udp_socket (name_bind))))
+ (macro namebind_port_udp_sockets ((type ARG1))
+ (allow ARG1 port (udp_socket (name_bind))))
- (macro nameconnect_port_dccp_sockets ((type ARG1))
- (allow ARG1 port (dccp_socket (name_connect))))
+ (macro nameconnect_port_dccp_sockets ((type ARG1))
+ (allow ARG1 port (dccp_socket (name_connect))))
- (macro nameconnect_port_sctp_sockets ((type ARG1))
- (allow ARG1 port (sctp_socket (name_connect))))
+ (macro nameconnect_port_sctp_sockets ((type ARG1))
+ (allow ARG1 port (sctp_socket (name_connect))))
- (macro nameconnect_port_tcp_sockets ((type ARG1))
- (allow ARG1 port (tcp_socket (name_connect)))))
+ (macro nameconnect_port_tcp_sockets ((type ARG1))
+ (allow ARG1 port (tcp_socket (name_connect)))))
- (block template
+ (block template
- (blockabstract template)
+ (blockabstract template)
- (blockinherit .net.port.base_template)
- (blockinherit .net.port.macro_template))
+ (blockinherit .net.port.base_template)
+ (blockinherit .net.port.macro_template))
- (block unconfined
+ (block unconfined
- (macro type ((type ARG1))
- (typeattributeset typeattr ARG1))
+ (macro type ((type ARG1))
+ (typeattributeset typeattr ARG1))
- (typeattribute typeattr)
+ (typeattribute typeattr)
- (allow typeattr port.typeattr (dccp_socket (name_bind name_connect)))
- (allow typeattr port.typeattr (icmp_socket (name_bind)))
- (allow typeattr port.typeattr (rawip_socket (name_bind)))
- (allow typeattr port.typeattr (sctp_socket (name_bind name_connect)))
- (allow typeattr port.typeattr (tcp_socket (name_bind name_connect)))
- (allow typeattr port.typeattr (udp_socket (name_bind))))))
+ (allow typeattr port.typeattr (dccp_socket (name_bind name_connect)))
+ (allow typeattr port.typeattr (icmp_socket (name_bind)))
+ (allow typeattr port.typeattr (rawip_socket (name_bind)))
+ (allow typeattr port.typeattr (sctp_socket (name_bind name_connect)))
+ (allow typeattr port.typeattr (tcp_socket (name_bind name_connect)))
+ (allow typeattr port.typeattr (udp_socket (name_bind))))))
(in net.unconfined
generated by cgit v1.2.3 (git 2.46.0) at 2025-09-21 02:23:36 +0000