blob: 6f2ce3f54fc6d1c8cf365d99684577d8c58d543c (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
|
;; SPDX-FileCopyrightText: © 2024 Dominick Grift <dominick.grift@defensec.nl>
;; SPDX-License-Identifier: Unlicense
(class binder (call impersonate set_context_mgr transfer))
(classorder (unordered binder))
(macro call_invalid_binders ((type ARG1))
(allow ARG1 .invalid (binder (call))))
(macro transfer_invalid_binders ((type ARG1))
(allow ARG1 .invalid (binder (transfer))))
(in invalid.unconfined
(allow typeattr .invalid (binder (not (impersonate set_context_mgr)))))
(in subj
(macro call_all_binders ((type ARG1))
(allow ARG1 typeattr (binder (call))))
(macro impersonate_all_binders ((type ARG1))
(allow ARG1 typeattr (binder (impersonate))))
(macro transfer_all_binders ((type ARG1))
(allow ARG1 typeattr (binder (transfer)))))
(in subj.macro_template
(macro call_subj_binders ((type ARG1))
(allow ARG1 subj (binder (call))))
(macro impersonate_subj_binders ((type ARG1))
(allow ARG1 subj (binder (impersonate))))
(macro transfer_subj_binders ((type ARG1))
(allow ARG1 subj (binder (transfer)))))
(in subj.unconfined
(allow typeattr .subj.typeattr (binder (all))))
|
