/external/selinux/secilc/docs/ |
D | cil_network_labeling_statements.md | 52 (nodecon ARG1 ARG2 netlabel_1)) 103 nodecon section in Network Labeling Statements 112 (nodecon subnet_id netmask_id context_id) 123 <td align="left"><p><code>nodecon</code></p></td> 124 <td align="left"><p>The <code>nodecon</code> keyword.</p></td> 143 These examples show named and anonymous [`nodecon`](cil_network_labeling_statements.md#nodecon) sta… 151 (nodecon netmask_1 ipv4_1 context_2) 152 (nodecon (255.255.255.0) (192.168.1.64) context_1) 153 (nodecon netmask_1 (192.168.1.64) (unconfined.user object_r unconfined.object ((s0) (s0 (c0)))))
|
D | README.md | 101 * [nodecon](cil_network_labeling_statements.md#nodecon)
|
/external/selinux/libsepol/cil/src/ |
D | cil_tree.c | 1454 struct cil_nodecon *nodecon = node->data; in cil_tree_print_node() local 1459 if (nodecon->addr) { in cil_tree_print_node() 1460 inet_ntop(nodecon->addr->family, &nodecon->addr->ip, buf, 256); in cil_tree_print_node() 1463 cil_log(CIL_INFO, " %s", nodecon->addr_str); in cil_tree_print_node() 1466 if (nodecon->mask) { in cil_tree_print_node() 1467 inet_ntop(nodecon->mask->family, &nodecon->mask->ip, buf, 256); in cil_tree_print_node() 1470 cil_log(CIL_INFO, " %s", nodecon->mask_str); in cil_tree_print_node() 1473 if (nodecon->context != NULL) { in cil_tree_print_node() 1474 cil_tree_print_context(nodecon->context); in cil_tree_print_node() 1475 } else if (nodecon->context_str != NULL) { in cil_tree_print_node() [all …]
|
D | cil_policy.c | 1791 struct cil_nodecon *nodecon; in cil_nodecons_to_policy() local 1795 nodecon = nodecons->array[i]; in cil_nodecons_to_policy() 1798 if (nodecon->addr->family == AF_INET) { in cil_nodecons_to_policy() 1801 inet_ntop(nodecon->addr->family, &nodecon->addr->ip.v4, addr, INET_ADDRSTRLEN); in cil_nodecons_to_policy() 1811 inet_ntop(nodecon->mask->family, &nodecon->mask->ip.v4, mask, INET_ADDRSTRLEN); in cil_nodecons_to_policy() 1821 inet_ntop(nodecon->addr->family, &nodecon->addr->ip.v6, addr, INET6_ADDRSTRLEN); in cil_nodecons_to_policy() 1831 inet_ntop(nodecon->mask->family, &nodecon->mask->ip.v6, mask, INET6_ADDRSTRLEN); in cil_nodecons_to_policy() 1840 cil_context_to_policy(out, nodecon->context, mls); in cil_nodecons_to_policy() 1978 cil_nodecons_to_policy(out, db->nodecon, db->mls); in cil_gen_policy()
|
D | cil_reset_ast.c | 305 static void cil_reset_nodecon(struct cil_nodecon *nodecon) in cil_reset_nodecon() argument 307 if (nodecon->context_str == NULL) { in cil_reset_nodecon() 308 cil_reset_context(nodecon->context); in cil_reset_nodecon()
|
D | cil.c | 262 cil_sort_init(&(*db)->nodecon); in cil_db_init() 315 cil_sort_destroy(&(*db)->nodecon); in cil_db_destroy() 2312 void cil_nodecon_init(struct cil_nodecon **nodecon) in cil_nodecon_init() argument 2314 *nodecon = cil_malloc(sizeof(**nodecon)); in cil_nodecon_init() 2316 (*nodecon)->addr_str = NULL; in cil_nodecon_init() 2317 (*nodecon)->addr = NULL; in cil_nodecon_init() 2318 (*nodecon)->mask_str = NULL; in cil_nodecon_init() 2319 (*nodecon)->mask = NULL; in cil_nodecon_init() 2320 (*nodecon)->context_str = NULL; in cil_nodecon_init() 2321 (*nodecon)->context = NULL; in cil_nodecon_init()
|
D | cil_build_ast.c | 4489 struct cil_nodecon *nodecon = NULL; in cil_gen_nodecon() local 4500 cil_nodecon_init(&nodecon); in cil_gen_nodecon() 4503 nodecon->addr_str = parse_current->next->data; in cil_gen_nodecon() 4505 cil_ipaddr_init(&nodecon->addr); in cil_gen_nodecon() 4507 rc = cil_fill_ipaddr(parse_current->next->cl_head, nodecon->addr); in cil_gen_nodecon() 4514 nodecon->mask_str = parse_current->next->next->data; in cil_gen_nodecon() 4516 cil_ipaddr_init(&nodecon->mask); in cil_gen_nodecon() 4518 rc = cil_fill_ipaddr(parse_current->next->next->cl_head, nodecon->mask); in cil_gen_nodecon() 4525 nodecon->context_str = parse_current->next->next->next->data; in cil_gen_nodecon() 4527 cil_context_init(&nodecon->context); in cil_gen_nodecon() [all …]
|
D | cil_resolve_ast.c | 2003 struct cil_nodecon *nodecon = current->data; in cil_resolve_nodecon() local 2009 if (nodecon->addr_str != NULL) { in cil_resolve_nodecon() 2010 rc = cil_resolve_name(current, nodecon->addr_str, CIL_SYM_IPADDRS, extra_args, &addr_datum); in cil_resolve_nodecon() 2014 nodecon->addr = (struct cil_ipaddr*)addr_datum; in cil_resolve_nodecon() 2017 if (nodecon->mask_str != NULL) { in cil_resolve_nodecon() 2018 rc = cil_resolve_name(current, nodecon->mask_str, CIL_SYM_IPADDRS, extra_args, &mask_datum); in cil_resolve_nodecon() 2022 nodecon->mask = (struct cil_ipaddr*)mask_datum; in cil_resolve_nodecon() 2025 if (nodecon->context_str != NULL) { in cil_resolve_nodecon() 2026 …rc = cil_resolve_name(current, nodecon->context_str, CIL_SYM_CONTEXTS, extra_args, &context_datum); in cil_resolve_nodecon() 2030 nodecon->context = (struct cil_context*)context_datum; in cil_resolve_nodecon() [all …]
|
D | cil_internal.h | 291 struct cil_sort *nodecon; member 1035 void cil_nodecon_init(struct cil_nodecon **nodecon);
|
D | cil_post.c | 623 db->nodecon->count++; in __cil_post_db_count_helper() 766 struct cil_sort *sort = db->nodecon; in __cil_post_db_array_helper() 1944 struct cil_nodecon *nodecon = node->data; in __cil_post_db_cat_helper() local 1945 rc = __evaluate_levelrange_expression(nodecon->context->range, db); in __cil_post_db_cat_helper() 2396 …rc = __cil_post_process_context_rules(db->nodecon, cil_post_nodecon_compare, cil_post_nodecon_cont… in cil_post_db()
|
/external/selinux/libsepol/cil/test/integration_testing/ |
D | nonmls.cil | 29 ;(nodecon ip_v4 netmask con) 30 ;(nodecon ip_v6 netmask_v6 con_anon_l)
|
D | mls_policy.cil | 53 (nodecon ip_v4 netmask con) 54 (nodecon ip_v6 netmask_v6 con_anon_l)
|
/external/selinux/secilc/test/ |
D | integration.cil | 171 (nodecon ip_v4 netmask system_u_bin_t_l2h) 172 (nodecon ip_v6 netmask_v6 system_u_bin_t_l2h)
|
D | policy.cil | 269 (nodecon ip_v4 netmask system_u_bin_t_l2h) 270 (nodecon ip_v6 netmask_v6 system_u_bin_t_l2h)
|
/external/selinux/libsepol/tests/policies/test-hooks/ |
D | cmp_policy.conf | 467 nodecon ::1 FFFF:FFFF:FFFF:FFFF:: gen_context(g_b_user_1:object_r:g_b_type_1, s0)
|
D | small-base.conf | 467 nodecon ::1 FFFF:FFFF:FFFF:FFFF:: gen_context(g_b_user_1:object_r:g_b_type_1, s0)
|
/external/selinux/libsepol/tests/policies/test-expander/ |
D | user-base.conf | 483 nodecon ::1 FFFF:FFFF:FFFF:FFFF:: gen_context(system_u:object_r:system_t, s0)
|
D | alias-base.conf | 497 nodecon ::1 FFFF:FFFF:FFFF:FFFF:: gen_context(system_u:object_r:system_t, s0)
|
D | role-base.conf | 479 nodecon ::1 FFFF:FFFF:FFFF:FFFF:: gen_context(system_u:object_r:system_t, s0)
|
/external/selinux/checkpolicy/ |
D | policy_scan.l | 195 nodecon |
|
/external/selinux/libsepol/tests/policies/test-deps/ |
D | small-base.conf | 507 nodecon ::1 FFFF:FFFF:FFFF:FFFF:: gen_context(system_u:object_r:net_foo_t, s0)
|
D | base-notmetreq.conf | 506 nodecon ::1 FFFF:FFFF:FFFF:FFFF:: gen_context(system_u:object_r:net_foo_t, s0)
|
D | base-metreq.conf | 519 nodecon ::1 FFFF:FFFF:FFFF:FFFF:: gen_context(system_u:object_r:net_foo_t, s0)
|
/external/selinux/libsepol/tests/policies/test-linker/ |
D | small-base.conf | 596 nodecon ::1 FFFF:FFFF:FFFF:FFFF:: gen_context(g_b_user_1:object_r:g_b_type_1, s0)
|
/external/selinux/libsepol/tests/policies/test-cond/ |
D | refpolicy-base.conf | 1933 nodecon :: ffff:ffff:ffff:ffff:ffff:ffff:: system_u:object_r:compat_ipv4_node_t:s0 1934 nodecon 0.0.0.0 255.255.255.255 system_u:object_r:inaddr_any_node_t:s0 1935 nodecon fe80:: ffff:ffff:ffff:ffff:: system_u:object_r:link_local_node_t:s0 1936 nodecon 127.0.0.1 255.255.255.255 system_u:object_r:lo_node_t:s0 1937 nodecon ::ffff:0000:0000 ffff:ffff:ffff:ffff:ffff:ffff:: system_u:object_r:mapped_ipv4_node_t:s0 1938 nodecon ff00:: ff00:: system_u:object_r:multicast_node_t:s0 1939 nodecon fec0:: ffc0:: system_u:object_r:site_local_node_t:s0 1940 nodecon :: ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff system_u:object_r:unspec_node_t:s0
|