454466e2e4
Revert^2 "Use cil_write_build_ast" bde09de39feec91cf8220f0f798a6e52154d69e9 Change-Id: I3ab19bda9c1968409ad5a4f4d0866649036c683c
106 lines
2 KiB
Text
106 lines
2 KiB
Text
;; Test anonymous args
|
|
|
|
(mls true)
|
|
(class CLASS (PERM))
|
|
(classorder (CLASS))
|
|
(sid SID)
|
|
(sidorder (SID))
|
|
(user USER)
|
|
(role ROLE)
|
|
(type TYPE)
|
|
(category CAT)
|
|
(categoryorder (CAT))
|
|
(sensitivity SENS)
|
|
(sensitivityorder (SENS))
|
|
(sensitivitycategory SENS (CAT))
|
|
(allow TYPE self (CLASS (PERM)))
|
|
(roletype ROLE TYPE)
|
|
(userrole USER ROLE)
|
|
(userlevel USER (SENS))
|
|
(userrange USER ((SENS)(SENS (CAT))))
|
|
(sidcontext SID (USER ROLE TYPE ((SENS)(SENS))))
|
|
|
|
(category c0)
|
|
(category c1)
|
|
(category c2)
|
|
(category c3)
|
|
(categoryorder (CAT c0 c1 c2 c3))
|
|
(categoryset cs01 (c0 c1))
|
|
(categoryset cs03 (range c0 c3))
|
|
|
|
(sensitivity s0)
|
|
(sensitivity s1)
|
|
(sensitivity s2)
|
|
(sensitivity s3)
|
|
(sensitivityorder (SENS s0 s1 s2 s3))
|
|
|
|
(sensitivitycategory s0 (cs01 c2 c3))
|
|
(sensitivitycategory s1 (c0 c1 c2 c3))
|
|
(sensitivitycategory s2 (c0 c1 c2 c3))
|
|
(sensitivitycategory s3 (range c0 c3))
|
|
|
|
(level lvl (s0 (c0)))
|
|
(level lvl0 (s0))
|
|
(level lvl3 (s3 (range c0 c3)))
|
|
|
|
(levelrange rng ((s0) (s3 (c0 c1 c2 c3))))
|
|
|
|
(user u1)
|
|
(user u2)
|
|
(user u3)
|
|
(user u4)
|
|
|
|
(userrole u1 ROLE)
|
|
(userrole u2 ROLE)
|
|
(userrole u3 ROLE)
|
|
(userrole u4 ROLE)
|
|
|
|
; Test categoryset
|
|
(macro m1 ((user u)(sensitivity s)(categoryset cs))
|
|
(userlevel u (s (cs)))
|
|
)
|
|
(call m1 (u1 s1 (c0 c1)))
|
|
(call m1 (u2 s2 cs01))
|
|
|
|
; Test level
|
|
(macro m2 ((user u)(level l))
|
|
(userlevel u l)
|
|
)
|
|
(call m2 (u3 (s3 (c2))))
|
|
(call m2 (u4 lvl))
|
|
|
|
; Test levelrange
|
|
(macro m3 ((user u)(levelrange lr))
|
|
(userrange u lr)
|
|
)
|
|
(call m3 (u1 ((s0) (s3 (range c0 c3)))))
|
|
(call m3 (u2 (lvl0 (s3 (cs03)))))
|
|
(call m3 (u3 (lvl0 lvl3)))
|
|
(call m3 (u4 rng))
|
|
|
|
; Test ipaddr
|
|
(macro m4 ((user u)(ipaddr nm)(ipaddr ip))
|
|
(nodecon ip nm (u ROLE TYPE ((s0) (s0))))
|
|
)
|
|
(ipaddr nm1 255.255.255.0)
|
|
(ipaddr ip4 1.2.3.4)
|
|
(call m4 (u1 nm1 192.25.35.200))
|
|
(call m4 (u2 255.255.255.0 ip4))
|
|
|
|
; Test classpermission
|
|
(type t1)
|
|
(type t2)
|
|
(type t3)
|
|
|
|
(classpermission cp1)
|
|
(classpermissionset cp1 (CLASS (PERM)))
|
|
|
|
(classmap cm1 (cm1p))
|
|
(classmapping cm1 cm1p (CLASS (PERM)))
|
|
|
|
(macro m5 ((type t)(classpermission cp))
|
|
(allow t self cp)
|
|
)
|
|
(call m5 (t1 (CLASS (PERM))))
|
|
(call m5 (t2 cp1))
|
|
(call m5 (t3 (cm1 (cm1p))))
|