mirror of
https://github.com/SELinuxProject/selinux
synced 2024-12-26 16:02:26 +00:00
c238906b5b
Add new test suite for semanage_iface_* functions. The test suite aims for line coverage and covers expected usage of functions. The test suite uses custom semanage store and policy written in CIL, it does not require running on SELinux enabled system. Signed-off-by: Jan Zarsky <jzarsky@redhat.com>
29 lines
1005 B
Plaintext
29 lines
1005 B
Plaintext
(typeattribute cil_gen_require)
|
|
(roleattribute cil_gen_require)
|
|
(handleunknown allow)
|
|
(mls true)
|
|
(policycap network_peer_controls)
|
|
(policycap open_perms)
|
|
(sid security)
|
|
(sidorder (security))
|
|
(sensitivity s0)
|
|
(sensitivityorder (s0))
|
|
(user system_u)
|
|
(userrole system_u object_r)
|
|
(userlevel system_u (s0))
|
|
(userrange system_u ((s0) (s0)))
|
|
(role object_r)
|
|
(roletype object_r first_netif_t)
|
|
(roletype object_r second_netif_t)
|
|
(roletype object_r third_netif_t)
|
|
(type first_netif_t)
|
|
(type second_netif_t)
|
|
(type third_netif_t)
|
|
(sidcontext security (system_u object_r first_netif_t ((s0) (s0))))
|
|
(class netif (tcp_recv))
|
|
(classorder (netif))
|
|
(allow first_netif_t self (netif (tcp_recv)))
|
|
(netifcon eth0 (system_u object_r first_netif_t ((s0) (s0))) (system_u object_r first_netif_t ((s0) (s0))))
|
|
(netifcon eth1 (system_u object_r second_netif_t ((s0) (s0))) (system_u object_r second_netif_t ((s0) (s0))))
|
|
(netifcon eth2 (system_u object_r third_netif_t ((s0) (s0))) (system_u object_r third_netif_t ((s0) (s0))))
|