From 0c187b6ff97f91c41dab65a6426dc61f77305cdf Mon Sep 17 00:00:00 2001
From: Dominick Grift <dominick.grift@defensec.nl>
Date: Sun, 20 Aug 2023 15:44:41 +0200
Subject: Import dssp5

Signed-off-by: Dominick Grift <dominick.grift@defensec.nl>
---
 src/misc/av/memprotectav.cil | 25 +++++++++++++++++++++++++
 1 file changed, 25 insertions(+)
 create mode 100644 src/misc/av/memprotectav.cil

(limited to 'src/misc/av/memprotectav.cil')

diff --git a/src/misc/av/memprotectav.cil b/src/misc/av/memprotectav.cil
new file mode 100644
index 0000000..a0ab2b8
--- /dev/null
+++ b/src/misc/av/memprotectav.cil
@@ -0,0 +1,25 @@
+;; SPDX-FileCopyrightText: © 2023 Dominick Grift <dominick.grift@defensec.nl>
+;; SPDX-License-Identifier: Unlicense
+
+(class memprotect (mmap_zero))
+(classorder (unordered memprotect))
+
+(in subj
+
+    (block mmapzero
+
+      (macro type ((type ARG1))
+	     (typeattributeset typeattr ARG1))
+
+      (typeattribute not_typeattr)
+      (typeattribute typeattr)
+
+      (typeattributeset not_typeattr (not typeattr))
+
+      (neverallow not_typeattr self (memprotect (mmap_zero)))))
+
+(in subj.unconfined
+
+    (allow typeattr self (memprotect (all)))
+
+    (call mmapzero.type (typeattr)))
-- 
cgit v1.2.3