From 0c187b6ff97f91c41dab65a6426dc61f77305cdf Mon Sep 17 00:00:00 2001 From: Dominick Grift Date: Sun, 20 Aug 2023 15:44:41 +0200 Subject: Import dssp5 Signed-off-by: Dominick Grift --- .../booleanfile/invalidpeersbooleanfile.cil | 34 ++++++++++++++++++++++ 1 file changed, 34 insertions(+) create mode 100644 src/selinux/booleanfile/invalidpeersbooleanfile.cil (limited to 'src/selinux/booleanfile/invalidpeersbooleanfile.cil') diff --git a/src/selinux/booleanfile/invalidpeersbooleanfile.cil b/src/selinux/booleanfile/invalidpeersbooleanfile.cil new file mode 100644 index 0000000..3a0b6cd --- /dev/null +++ b/src/selinux/booleanfile/invalidpeersbooleanfile.cil @@ -0,0 +1,34 @@ +;; SPDX-FileCopyrightText: © 2023 Dominick Grift +;; SPDX-License-Identifier: Unlicense + +(tunable invalid_peers true) + +(block invalid_peers + + (genfscon "selinuxfs" "/booleans/invalid_peers" booleanfile_context) + + (blockinherit .booleanfile.template)) + +(block invalidpeers + + (macro type ((type ARG1)) + (typeattributeset typeattr ARG1)) + + (typeattribute typeattr) + + (block except + + (macro type ((type ARG1)) + (typeattributeset typeattr ARG1)) + + (typeattribute typeattr) + + (typeattributeset typeattr + (and invalidpeers.typeattr (not (exception.typeattr))))) + + (block exception + + (macro type ((type ARG1)) + (typeattributeset typeattr ARG1)) + + (typeattribute typeattr))) -- cgit v1.2.3