summaryrefslogtreecommitdiff
path: root/src/file/certfile.cil
blob: 6eda0f8102c8c074856e34f507abcd96b368f26e (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
;; SPDX-FileCopyrightText: © 2025 Dominick Grift <dominick.grift@defensec.nl>
;; SPDX-License-Identifier: Unlicense

(block cert
    
    (filecon "/etc/ca-certificates" dir file_context)
    (filecon "/etc/ca-certificates/.*" any file_context)

    (filecon "/etc/ca-certificates\.conf" file file_context)
    (filecon "/etc/ca-certificates\.conf\..*" file file_context)

    (filecon "/etc/ssl" dir file_context)
    (filecon "/etc/ssl/.*" any file_context)

    (filecon "/usr/share/ca-certificates" dir file_context)
    (filecon "/usr/share/ca-certificates/.*" any file_context)

    (blockinherit .file.cert.template)
    
    (macro conf_file_type_transition_file ((type ARG1))
	(call .conf.file_type_transition
	    (ARG1 file dir "ca-certificates"))
	(call .conf.file_type_transition
	    (ARG1 file dir "ssl"))
	(call .conf.file_type_transition
	    (ARG1 file file "ca-certificates.conf"))
	(call .conf.file_type_transition
	    (ARG1 file file "ca-certificates.conf.dpkg-new")))

    (macro data_file_type_transition_file ((type ARG1))
	(call .data.file_type_transition
	    (ARG1 file dir "ca-certificates"))))

(in file

    (block cert

      (macro type ((type ARG1))
	     (typeattributeset typeattr ARG1))

      (blockinherit file.all_macro_template_dirs)
      (blockinherit file.all_macro_template_files)
      (blockinherit file.all_macro_template_lnk_files)

      (typeattribute typeattr)

      (call file.type (typeattr))

      (call .xattr.associate_fs (typeattr))

      (block base_template

	(blockabstract base_template)

	(blockinherit .file.base_template)

	(call .file.cert.type (file)))

      (block template

	(blockabstract template)

	(blockinherit .file.cert.base_template)
	(blockinherit .file.macro_template_dirs)
	(blockinherit .file.macro_template_files)
	(blockinherit .file.macro_template_lnk_files))))