blob: e7cd99d33dc7c6cca14923cd548098194378b3bd (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
|
;; SPDX-FileCopyrightText: © 2024 Dominick Grift <dominick.grift@defensec.nl>
;; SPDX-License-Identifier: Unlicense
(defaultrange blk_file source low)
(defaultrange chr_file source low)
(defaultrange dir source low)
(defaultrange fifo_file source low)
(defaultrange file source low)
(defaultrange lnk_file source low)
(defaultrange sock_file source low)
(block mcs
(mlsconstrain (constrainobject (create relabelto))
(or (neq t1 constrained.typeattr)
(and (dom h1 h2) (eq l2 h2))))
(mlsconstrain (constrainobject (append getattr read setattr write))
(or (dom h1 h2)
(neq t1 constrained.typeattr)))
(mlsconstrain
(process (dyntransition getrlimit getsched ptrace setrlimit setsched
sigchld sigkill signal signull sigstop
transition))
(or (dom h1 h2)
(neq t1 constrained.typeattr)))
(mlsconstrain (fifo_file (append getattr read write setattr))
(or (dom h1 h2)
(neq t1 constrained.typeattr)))
(block constrained
(macro type ((type ARG1))
(typeattributeset typeattr ARG1))
(typeattribute typeattr)))
|
