summaryrefslogtreecommitdiff
path: root/src/file/certfile.cil
blob: be381cd0c946368c203058d13024f93d3326dc55 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
;; SPDX-FileCopyrightText: M-BM-) 2025 Dominick Grift <dominick.grift@defensec.nl>
;; SPDX-License-Identifier: Unlicense

(block cert
    
    (filecon "/etc/ca-certificates" dir file_context)
    (filecon "/etc/ca-certificates/.*" any file_context)

    (filecon "/etc/ca-certificates\.conf" file file_context)
    (filecon "/etc/ca-certificates\.conf\..*" file file_context)

    (filecon "/etc/ssl" dir file_context)
    (filecon "/etc/ssl/.*" any file_context)

    (filecon "/usr/share/ca-certificates" dir file_context)
    (filecon "/usr/share/ca-certificates/.*" any file_context)

    (blockinherit .file.cert.template)
    
    (macro conf_file_type_transition_file ((type ARG1))
	(call .conf.file_type_transition
	    (ARG1 file dir "ca-certificates"))
	(call .conf.file_type_transition
	    (ARG1 file dir "ssl"))
	(call .conf.file_type_transition
	    (ARG1 file file "ca-certificates.conf"))
	(call .conf.file_type_transition
	    (ARG1 file file "ca-certificates.conf.dpkg-new")))

    (macro data_file_type_transition_file ((type ARG1))
	(call .data.file_type_transition
	    (ARG1 file dir "ca-certificates"))))

(in file

    (block cert

	(macro type ((type ARG1))
	    (typeattributeset typeattr ARG1))

	(blockinherit file.all_macro_template_dirs)
	(blockinherit file.all_macro_template_files)
	(blockinherit file.all_macro_template_lnk_files)

	(typeattribute typeattr)

	(call file.type (typeattr))

	(call .xattr.associate_fs (typeattr))

	(block base_template

	    (blockabstract base_template)

	    (blockinherit .file.base_template)

	    (call .file.cert.type (file)))

	(block template

	    (blockabstract template)

	    (blockinherit .file.cert.base_template)
	    (blockinherit .file.macro_template_dirs)
	    (blockinherit .file.macro_template_files)
	    (blockinherit .file.macro_template_lnk_files))))