diff options
Diffstat (limited to 'src/sys/procfile.cil')
-rw-r--r-- | src/sys/procfile.cil | 240 |
1 files changed, 120 insertions, 120 deletions
diff --git a/src/sys/procfile.cil b/src/sys/procfile.cil index 85ef97a..068725e 100644 --- a/src/sys/procfile.cil +++ b/src/sys/procfile.cil @@ -1,192 +1,192 @@ -;; SPDX-FileCopyrightText: © 2025 Dominick Grift <dominick.grift@defensec.nl> +;; SPDX-FileCopyrightText: M-BM-) 2025 Dominick Grift <dominick.grift@defensec.nl> ;; SPDX-License-Identifier: Unlicense (block procfile - (macro type ((type ARG1)) - (typeattributeset typeattr ARG1)) + (macro type ((type ARG1)) + (typeattributeset typeattr ARG1)) - (typeattribute typeattr) + (typeattribute typeattr) - (blockinherit .file.all_macro_template_dirs) - (blockinherit .file.all_macro_template_files) - (blockinherit .file.all_macro_template_lnk_files) + (blockinherit .file.all_macro_template_dirs) + (blockinherit .file.all_macro_template_files) + (blockinherit .file.all_macro_template_lnk_files) - (call .obj.type (typeattr)) + (call .obj.type (typeattr)) - (block base_template + (block base_template - (blockabstract base_template) + (blockabstract base_template) - (context procfile_context (.sys.id .sys.role procfile .sys.lowlow)) + (context procfile_context (.sys.id .sys.role procfile .sys.lowlow)) - (type procfile) - (call .procfile.type (procfile))) + (type procfile) + (call .procfile.type (procfile))) - (block except + (block except - (macro type ((type ARG1)) - (typeattributeset typeattr ARG1)) + (macro type ((type ARG1)) + (typeattributeset typeattr ARG1)) - (blockinherit file.all_macro_template_dirs) - (blockinherit file.all_macro_template_files) - (blockinherit file.all_macro_template_lnk_files) + (blockinherit file.all_macro_template_dirs) + (blockinherit file.all_macro_template_files) + (blockinherit file.all_macro_template_lnk_files) - (typeattribute typeattr) + (typeattribute typeattr) - (typeattributeset typeattr - (and procfile.typeattr (not (exception.typeattr))))) + (typeattributeset typeattr + (and procfile.typeattr (not (exception.typeattr))))) - (block exception + (block exception - (macro type ((type ARG1)) - (typeattributeset typeattr ARG1)) + (macro type ((type ARG1)) + (typeattributeset typeattr ARG1)) - (typeattribute typeattr) + (typeattribute typeattr) - (call procfile.type (typeattr))) + (call procfile.type (typeattr))) - (block macro_template_dirs + (block macro_template_dirs - (blockabstract macro_template_dirs) + (blockabstract macro_template_dirs) - (macro addname_procfile_dirs ((type ARG1)) - (allow ARG1 procfile addname_dir)) + (macro addname_procfile_dirs ((type ARG1)) + (allow ARG1 procfile addname_dir)) - (macro create_procfile_dirs ((type ARG1)) - (allow ARG1 procfile create_dir)) + (macro create_procfile_dirs ((type ARG1)) + (allow ARG1 procfile create_dir)) - (macro delete_procfile_dirs ((type ARG1)) - (allow ARG1 procfile delete_dir)) + (macro delete_procfile_dirs ((type ARG1)) + (allow ARG1 procfile delete_dir)) - (macro deletename_procfile_dirs ((type ARG1)) - (allow ARG1 procfile deletename_dir)) + (macro deletename_procfile_dirs ((type ARG1)) + (allow ARG1 procfile deletename_dir)) - (macro list_procfile_dirs ((type ARG1)) - (allow ARG1 procfile list_dir)) + (macro list_procfile_dirs ((type ARG1)) + (allow ARG1 procfile list_dir)) - (macro listinherited_procfile_dirs ((type ARG1)) - (allow ARG1 procfile listinherited_dir)) + (macro listinherited_procfile_dirs ((type ARG1)) + (allow ARG1 procfile listinherited_dir)) - (macro manage_procfile_dirs ((type ARG1)) - (allow ARG1 procfile manage_dir)) + (macro manage_procfile_dirs ((type ARG1)) + (allow ARG1 procfile manage_dir)) - (macro mounton_procfile_dirs ((type ARG1)) - (allow ARG1 procfile mounton_dir)) + (macro mounton_procfile_dirs ((type ARG1)) + (allow ARG1 procfile mounton_dir)) - (macro readwrite_procfile_dirs ((type ARG1)) - (allow ARG1 procfile readwrite_dir)) + (macro readwrite_procfile_dirs ((type ARG1)) + (allow ARG1 procfile readwrite_dir)) - (macro readwriteinherited_procfile_dirs ((type ARG1)) - (allow ARG1 procfile readwriteinherited_dir)) + (macro readwriteinherited_procfile_dirs ((type ARG1)) + (allow ARG1 procfile readwriteinherited_dir)) - (macro rename_procfile_dirs ((type ARG1)) - (allow ARG1 procfile rename_dir)) + (macro rename_procfile_dirs ((type ARG1)) + (allow ARG1 procfile rename_dir)) - (macro search_procfile_dirs ((type ARG1)) - (allow ARG1 procfile search_dir)) + (macro search_procfile_dirs ((type ARG1)) + (allow ARG1 procfile search_dir)) - (macro write_procfile_dirs ((type ARG1)) - (allow ARG1 procfile write_dir)) + (macro write_procfile_dirs ((type ARG1)) + (allow ARG1 procfile write_dir)) - (macro writeinherited_procfile_dirs ((type ARG1)) - (allow ARG1 procfile writeinherited_dir))) + (macro writeinherited_procfile_dirs ((type ARG1)) + (allow ARG1 procfile writeinherited_dir))) - (block macro_template_files + (block macro_template_files - (blockabstract macro_template_files) + (blockabstract macro_template_files) - (macro append_procfile_files ((type ARG1)) - (allow ARG1 procfile append_file)) + (macro append_procfile_files ((type ARG1)) + (allow ARG1 procfile append_file)) - (macro appendinherited_procfile_files ((type ARG1)) - (allow ARG1 procfile appendinherited_file)) + (macro appendinherited_procfile_files ((type ARG1)) + (allow ARG1 procfile appendinherited_file)) - (macro create_procfile_files ((type ARG1)) - (allow ARG1 procfile create_file)) + (macro create_procfile_files ((type ARG1)) + (allow ARG1 procfile create_file)) - (macro delete_procfile_files ((type ARG1)) - (allow ARG1 procfile delete_file)) + (macro delete_procfile_files ((type ARG1)) + (allow ARG1 procfile delete_file)) - (macro execute_procfile_files ((type ARG1)) - (allow ARG1 procfile execute_file)) + (macro execute_procfile_files ((type ARG1)) + (allow ARG1 procfile execute_file)) - (macro manage_procfile_files ((type ARG1)) - (allow ARG1 procfile manage_file)) + (macro manage_procfile_files ((type ARG1)) + (allow ARG1 procfile manage_file)) - (macro mapexecute_procfile_files ((type ARG1)) - (allow ARG1 procfile mapexecute_file)) + (macro mapexecute_procfile_files ((type ARG1)) + (allow ARG1 procfile mapexecute_file)) - (macro mounton_procfile_files ((type ARG1)) - (allow ARG1 procfile mounton_file)) + (macro mounton_procfile_files ((type ARG1)) + (allow ARG1 procfile mounton_file)) - (macro read_procfile_files ((type ARG1)) - (allow ARG1 procfile read_file)) + (macro read_procfile_files ((type ARG1)) + (allow ARG1 procfile read_file)) - (macro readinherited_procfile_files ((type ARG1)) - (allow ARG1 procfile readinherited_file)) + (macro readinherited_procfile_files ((type ARG1)) + (allow ARG1 procfile readinherited_file)) - (macro readwrite_procfile_files ((type ARG1)) - (allow ARG1 procfile readwrite_file)) + (macro readwrite_procfile_files ((type ARG1)) + (allow ARG1 procfile readwrite_file)) - (macro readwriteinherited_procfile_files ((type ARG1)) - (allow ARG1 procfile readwriteinherited_file)) + (macro readwriteinherited_procfile_files ((type ARG1)) + (allow ARG1 procfile readwriteinherited_file)) - (macro rename_procfile_files ((type ARG1)) - (allow ARG1 procfile rename_file)) + (macro rename_procfile_files ((type ARG1)) + (allow ARG1 procfile rename_file)) - (macro write_procfile_files ((type ARG1)) - (allow ARG1 procfile write_file)) + (macro write_procfile_files ((type ARG1)) + (allow ARG1 procfile write_file)) - (macro writeinherited_procfile_files ((type ARG1)) - (allow ARG1 procfile writeinherited_file))) + (macro writeinherited_procfile_files ((type ARG1)) + (allow ARG1 procfile writeinherited_file))) - (block macro_template_lnk_files + (block macro_template_lnk_files - (blockabstract macro_template_lnk_files) + (blockabstract macro_template_lnk_files) - (macro create_procfile_lnk_files ((type ARG1)) - (allow ARG1 procfile create_lnk_file)) + (macro create_procfile_lnk_files ((type ARG1)) + (allow ARG1 procfile create_lnk_file)) - (macro delete_procfile_lnk_files ((type ARG1)) - (allow ARG1 procfile delete_lnk_file)) + (macro delete_procfile_lnk_files ((type ARG1)) + (allow ARG1 procfile delete_lnk_file)) - (macro manage_procfile_lnk_files ((type ARG1)) - (allow ARG1 procfile manage_lnk_file)) + (macro manage_procfile_lnk_files ((type ARG1)) + (allow ARG1 procfile manage_lnk_file)) - (macro read_procfile_lnk_files ((type ARG1)) - (allow ARG1 procfile read_lnk_file)) + (macro read_procfile_lnk_files ((type ARG1)) + (allow ARG1 procfile read_lnk_file)) - (macro readwrite_procfile_lnk_files ((type ARG1)) - (allow ARG1 procfile readwrite_lnk_file)) + (macro readwrite_procfile_lnk_files ((type ARG1)) + (allow ARG1 procfile readwrite_lnk_file)) - (macro rename_procfile_lnk_files ((type ARG1)) - (allow ARG1 procfile rename_lnk_file)) + (macro rename_procfile_lnk_files ((type ARG1)) + (allow ARG1 procfile rename_lnk_file)) - (macro write_procfile_lnk_files ((type ARG1)) - (allow ARG1 procfile write_lnk_file))) + (macro write_procfile_lnk_files ((type ARG1)) + (allow ARG1 procfile write_lnk_file))) - (block template + (block template - (blockabstract template) + (blockabstract template) - (blockinherit .procfile.base_template) - (blockinherit .procfile.macro_template_files)) + (blockinherit .procfile.base_template) + (blockinherit .procfile.macro_template_files)) - (block unconfined + (block unconfined - (macro type ((type ARG1)) - (typeattributeset typeattr ARG1)) + (macro type ((type ARG1)) + (typeattributeset typeattr ARG1)) - (typeattribute typeattr) + (typeattribute typeattr) - (allow typeattr procfile.typeattr - (dir (not (audit_access execmod relabelfrom relabelto)))) - (allow typeattr procfile.typeattr - (file (not (audit_access entrypoint execmod relabelfrom relabelto)))) - (allow typeattr procfile.typeattr - (lnk_file (not (audit_access execmod map mounton relabelfrom - relabelto)))))) + (allow typeattr procfile.typeattr + (dir (not (audit_access execmod relabelfrom relabelto)))) + (allow typeattr procfile.typeattr + (file (not (audit_access entrypoint execmod relabelfrom relabelto)))) + (allow typeattr procfile.typeattr + (lnk_file (not (audit_access execmod map mounton relabelfrom + relabelto)))))) (in sys.unconfined |