blob: 7b989fa8e02a78dbdea80f091cb35fd1f45f1635 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
|
;; SPDX-FileCopyrightText: © 2024 Dominick Grift <dominick.grift@defensec.nl>
;; SPDX-License-Identifier: Unlicense
(sidcontext port (sys.id sys.role net.port sys.lowlow))
(in net
(blockinherit port.template)
(block port
(macro type ((type ARG1))
(typeattributeset typeattr ARG1))
(typeattribute typeattr)
(blockinherit all_macro_template)
(call .obj.type (typeattr))
(block all_macro_template
(blockabstract all_macro_template)
(macro namebind_all_dccp_sockets ((type ARG1))
(allow ARG1 typeattr (dccp_socket (name_bind))))
(macro namebind_all_icmp_sockets ((type ARG1))
(allow ARG1 typeattr (icmp_socket (name_bind))))
(macro namebind_all_rawip_sockets ((type ARG1))
(allow ARG1 typeattr (rawip_socket (name_bind))))
(macro namebind_all_sctp_sockets ((type ARG1))
(allow ARG1 typeattr (sctp_socket (name_bind))))
(macro namebind_all_tcp_sockets ((type ARG1))
(allow ARG1 typeattr (tcp_socket (name_bind))))
(macro namebind_all_udp_sockets ((type ARG1))
(allow ARG1 typeattr (udp_socket (name_bind))))
(macro nameconnect_all_dccp_sockets ((type ARG1))
(allow ARG1 typeattr (dccp_socket (name_connect))))
(macro nameconnect_all_sctp_sockets ((type ARG1))
(allow ARG1 typeattr (sctp_socket (name_connect))))
(macro nameconnect_all_tcp_sockets ((type ARG1))
(allow ARG1 typeattr (tcp_socket (name_connect)))))
(block base_template
(blockabstract base_template)
(context port_context (.sys.id .sys.role port .sys.lowlow))
(type port)
(call .net.port.type (port)))
(block macro_template
(blockabstract macro_template)
(macro namebind_port_dccp_sockets ((type ARG1))
(allow ARG1 port (dccp_socket (name_bind))))
(macro namebind_port_icmp_sockets ((type ARG1))
(allow ARG1 port (icmp_socket (name_bind))))
(macro namebind_port_rawip_sockets ((type ARG1))
(allow ARG1 port (rawip_socket (name_bind))))
(macro namebind_port_sctp_sockets ((type ARG1))
(allow ARG1 port (sctp_socket (name_bind))))
(macro namebind_port_tcp_sockets ((type ARG1))
(allow ARG1 port (tcp_socket (name_bind))))
(macro namebind_port_udp_sockets ((type ARG1))
(allow ARG1 port (udp_socket (name_bind))))
(macro nameconnect_port_dccp_sockets ((type ARG1))
(allow ARG1 port (dccp_socket (name_connect))))
(macro nameconnect_port_sctp_sockets ((type ARG1))
(allow ARG1 port (sctp_socket (name_connect))))
(macro nameconnect_port_tcp_sockets ((type ARG1))
(allow ARG1 port (tcp_socket (name_connect)))))
(block template
(blockabstract template)
(blockinherit .net.port.base_template)
(blockinherit .net.port.macro_template))
(block unconfined
(macro type ((type ARG1))
(typeattributeset typeattr ARG1))
(typeattribute typeattr)
(allow typeattr port.typeattr (dccp_socket (name_bind name_connect)))
(allow typeattr port.typeattr (icmp_socket (name_bind)))
(allow typeattr port.typeattr (rawip_socket (name_bind)))
(allow typeattr port.typeattr (sctp_socket (name_bind name_connect)))
(allow typeattr port.typeattr (tcp_socket (name_bind name_connect)))
(allow typeattr port.typeattr (udp_socket (name_bind))))))
(in net.unconfined
(call .net.port.unconfined.type (typeattr)))
|
