xref: /aosp_15_r20/external/selinux/secilc/test/neverallow.cil (revision 2d543d20722ada2425b5bdab9d0d1d29470e7bba)
1*2d543d20SAndroid Build Coastguard Worker(class CLASS (PERM))
2*2d543d20SAndroid Build Coastguard Worker(classorder (CLASS))
3*2d543d20SAndroid Build Coastguard Worker(sid SID)
4*2d543d20SAndroid Build Coastguard Worker(sidorder (SID))
5*2d543d20SAndroid Build Coastguard Worker(user USER)
6*2d543d20SAndroid Build Coastguard Worker(role ROLE)
7*2d543d20SAndroid Build Coastguard Worker(type TYPE)
8*2d543d20SAndroid Build Coastguard Worker(category CAT)
9*2d543d20SAndroid Build Coastguard Worker(categoryorder (CAT))
10*2d543d20SAndroid Build Coastguard Worker(sensitivity SENS)
11*2d543d20SAndroid Build Coastguard Worker(sensitivityorder (SENS))
12*2d543d20SAndroid Build Coastguard Worker(sensitivitycategory SENS (CAT))
13*2d543d20SAndroid Build Coastguard Worker(allow TYPE self (CLASS (PERM)))
14*2d543d20SAndroid Build Coastguard Worker(roletype ROLE TYPE)
15*2d543d20SAndroid Build Coastguard Worker(userrole USER ROLE)
16*2d543d20SAndroid Build Coastguard Worker(userlevel USER (SENS))
17*2d543d20SAndroid Build Coastguard Worker(userrange USER ((SENS)(SENS (CAT))))
18*2d543d20SAndroid Build Coastguard Worker(sidcontext SID (USER ROLE TYPE ((SENS)(SENS))))
19*2d543d20SAndroid Build Coastguard Worker
20*2d543d20SAndroid Build Coastguard Worker(class c1 (p1a p1b p1c))
21*2d543d20SAndroid Build Coastguard Worker(class c2 (p2a p2b p2c))
22*2d543d20SAndroid Build Coastguard Worker(class c3 (p3a p3b p3c))
23*2d543d20SAndroid Build Coastguard Worker
24*2d543d20SAndroid Build Coastguard Worker(classorder (CLASS c1 c2 c3))
25*2d543d20SAndroid Build Coastguard Worker
26*2d543d20SAndroid Build Coastguard Worker(classpermission cp1)
27*2d543d20SAndroid Build Coastguard Worker(classpermissionset cp1 (c1 (p1a p1b)))
28*2d543d20SAndroid Build Coastguard Worker(classpermissionset cp1 (c2 (p2a)))
29*2d543d20SAndroid Build Coastguard Worker
30*2d543d20SAndroid Build Coastguard Worker(classmap cm1 (mp1))
31*2d543d20SAndroid Build Coastguard Worker(classmapping cm1 mp1
32*2d543d20SAndroid Build Coastguard Worker	      (c1 (p1a)))
33*2d543d20SAndroid Build Coastguard Worker
34*2d543d20SAndroid Build Coastguard Worker(type t1)
35*2d543d20SAndroid Build Coastguard Worker(type t2)
36*2d543d20SAndroid Build Coastguard Worker(type t3)
37*2d543d20SAndroid Build Coastguard Worker(type t4)
38*2d543d20SAndroid Build Coastguard Worker(type t5)
39*2d543d20SAndroid Build Coastguard Worker(type t6)
40*2d543d20SAndroid Build Coastguard Worker(type t7)
41*2d543d20SAndroid Build Coastguard Worker
42*2d543d20SAndroid Build Coastguard Worker(typeattribute a1)
43*2d543d20SAndroid Build Coastguard Worker(typeattribute a2)
44*2d543d20SAndroid Build Coastguard Worker(typeattribute a3)
45*2d543d20SAndroid Build Coastguard Worker(typeattribute a4)
46*2d543d20SAndroid Build Coastguard Worker(typeattribute a5)
47*2d543d20SAndroid Build Coastguard Worker(typeattribute a6)
48*2d543d20SAndroid Build Coastguard Worker
49*2d543d20SAndroid Build Coastguard Worker(typeattributeset a1 (t1 t2 t3 t4 t5))
50*2d543d20SAndroid Build Coastguard Worker(typeattributeset a2 (t1 t2))
51*2d543d20SAndroid Build Coastguard Worker(typeattributeset a3 (t3 t4))
52*2d543d20SAndroid Build Coastguard Worker(typeattributeset a4 (t2 t3))
53*2d543d20SAndroid Build Coastguard Worker(typeattributeset a5 (t5 t6))
54*2d543d20SAndroid Build Coastguard Worker(typeattributeset a6 (t6 t7))
55*2d543d20SAndroid Build Coastguard Worker
56*2d543d20SAndroid Build Coastguard Worker(neverallow t1 t2 (c1 (p1a p1b)))
57*2d543d20SAndroid Build Coastguard Worker(allow t1 t2 (c1 (p1a)))
58*2d543d20SAndroid Build Coastguard Worker
59*2d543d20SAndroid Build Coastguard Worker(neverallow t3 t4 (cm1 (mp1)))
60*2d543d20SAndroid Build Coastguard Worker(allow t3 t4 (c1 (p1a)))
61*2d543d20SAndroid Build Coastguard Worker
62*2d543d20SAndroid Build Coastguard Worker(neverallow t5 t6 cp1)
63*2d543d20SAndroid Build Coastguard Worker(allow t5 t6 (c1 (p1b)))
64*2d543d20SAndroid Build Coastguard Worker(allow t5 t6 (c2 (p2a)))
65*2d543d20SAndroid Build Coastguard Worker
66*2d543d20SAndroid Build Coastguard Worker(neverallow a1 self (CLASS (PERM)))
67*2d543d20SAndroid Build Coastguard Worker(allow t1 t1 (CLASS (PERM)))
68*2d543d20SAndroid Build Coastguard Worker(allow t2 self (CLASS (PERM)))
69*2d543d20SAndroid Build Coastguard Worker(allow a3 self (CLASS (PERM)))
70*2d543d20SAndroid Build Coastguard Worker(allow a2 a4 (CLASS (PERM)))
71*2d543d20SAndroid Build Coastguard Worker
72*2d543d20SAndroid Build Coastguard Worker(neverallow a5 a6 (CLASS (PERM)))
73*2d543d20SAndroid Build Coastguard Worker(allow t5 t7 (CLASS (PERM)))
74*2d543d20SAndroid Build Coastguard Worker(allow t6 self (CLASS (PERM)))
75*2d543d20SAndroid Build Coastguard Worker
76*2d543d20SAndroid Build Coastguard Worker;; Should not call these violations
77*2d543d20SAndroid Build Coastguard Worker(allow a1 self (c1 (p1a)))
78*2d543d20SAndroid Build Coastguard Worker(allow a2 a3 (CLASS (PERM)))
79*2d543d20SAndroid Build Coastguard Worker(allow t5 t6 (c2 (p2b)))
80