xref: /external/selinux/secilc/docs

CIL (Common Intermediate Language)
===============
## Table of Contents

* [Introduction](cil_introduction.md#Introduction)
  * [Design Philosophy](cil_introduction.md#design-philosophy)
  * [Goals and Primary Features](cil_introduction.md#goals-and-primary-features)
  * [Design Overview](cil_introduction.md#design-overview)

* [CIL Information](cil_reference_guide.md#cil-information)
  * [Declarations](cil_reference_guide.md#declarations)
  * [Definitions](cil_reference_guide.md#definitions)
  * [Symbol Character Set](cil_reference_guide.md#symbol-character-set)
  * [String Character Set](cil_reference_guide.md#string-character-set)
  * [Comments](cil_reference_guide.md#comments)
  * [Namespaces](cil_reference_guide.md#namespaces)
  * [Global Namespace](cil_reference_guide.md#global-namespace)
  * [Expressions](cil_reference_guide.md#expressions)
  * [Name String](cil_reference_guide.md#name-string)
  * [self](cil_reference_guide.md#self)
  * [Example CIL Policy](../test/policy.cil)

* [Access Vector Rules](cil_access_vector_rules.md#access-vector-rules)
  * [allow](cil_access_vector_rules.md#allow)
  * [auditallow](cil_access_vector_rules.md#auditallow)
  * [dontaudit](cil_access_vector_rules.md#dontaudit)
  * [neverallow](cil_access_vector_rules.md#neverallow)
  * [allowx](cil_access_vector_rules.md#allowx)
  * [auditallowx](cil_access_vector_rules.md#auditallowx)
  * [dontauditx](cil_access_vector_rules.md#dontauditx)
  * [neverallowx](cil_access_vector_rules.md#neverallowx)

* [Call / Macro Statements](cil_call_macro_statements.md#call--macro-statements)
  * [call](cil_call_macro_statements.md#call)
  * [macro](cil_call_macro_statements.md#macro)

* [Class and Permission Statements](cil_class_and_permission_statements.md#class-and-permission-statements)
  * [common](cil_class_and_permission_statements.md#common)
  * [classcommon](cil_class_and_permission_statements.md#classcommon)
  * [class](cil_class_and_permission_statements.md#class)
  * [classorder](cil_class_and_permission_statements.md#classorder)
  * [classpermission](cil_class_and_permission_statements.md#classpermission)
  * [classpermissionset](cil_class_and_permission_statements.md#classpermissionset)
  * [classmap](cil_class_and_permission_statements.md#classmap)
  * [classmapping](cil_class_and_permission_statements.md#classmapping)
  * [permissionx](cil_class_and_permission_statements.md#permissionx)

* [Conditional Statements](cil_conditional_statements.md#conditional-statements)
  * [boolean](cil_conditional_statements.md#boolean)
  * [booleanif](cil_conditional_statements.md#booleanif)
  * [tunable](cil_conditional_statements.md#tunable)
  * [tunableif](cil_conditional_statements.md#tunableif)

* [Constraint Statements](cil_constraint_statements.md#constraint-statements)
  * [constrain](cil_constraint_statements.md#constrain)
  * [validatetrans](cil_constraint_statements.md#validatetrans)
  * [mlsconstrain](cil_constraint_statements.md#mlsconstrain)
  * [mlsvalidatetrans](cil_constraint_statements.md#mlsvalidatetrans)

* [Container Statements](cil_container_statements.md#container-statements)
  * [block](cil_container_statements.md#block)
  * [blockabstract](cil_container_statements.md#blockabstract)
  * [blockinherit](cil_container_statements.md#blockinherit)
  * [optional](cil_container_statements.md#optional)
  * [in](cil_container_statements.md#in)

* [Context Statement](cil_context_statement.md#context-statement)
  * [context](cil_context_statement.md#context)

* [Default Object Statements](cil_default_object_statements.md#default-object-statements)
  * [defaultuser](cil_default_object_statements.md#defaultuser)
  * [defaultrole](cil_default_object_statements.md#defaultrole)
  * [defaulttype](cil_default_object_statements.md#defaulttype)
  * [defaultrange](cil_default_object_statements.md#defaultrange)

* [File Labeling Statements](cil_file_labeling_statements.md#file-labeling-statements)
  * [filecon](cil_file_labeling_statements.md#filecon)
  * [fsuse](cil_file_labeling_statements.md#fsuse)
  * [genfscon](cil_file_labeling_statements.md#genfscon)

* [Multi-Level Security Labeling Statements](cil_mls_labeling_statements.md#multi-level-security-labeling-statements)
  * [sensitivity](cil_mls_labeling_statements.md#sensitivity)
  * [sensitivityalias](cil_mls_labeling_statements.md#sensitivityalias)
  * [sensitivityaliasactual](cil_mls_labeling_statements.md#sensitivityaliasactual)
  * [sensitivityorder](cil_mls_labeling_statements.md#sensitivityorder)
  * [category](cil_mls_labeling_statements.md#category)
  * [categoryalias](cil_mls_labeling_statements.md#categoryalias)
  * [categoryaliasactual](cil_mls_labeling_statements.md#categoryaliasactual)
  * [categoryorder](cil_mls_labeling_statements.md#categoryorder)
  * [categoryset](cil_mls_labeling_statements.md#categoryset)
  * [sensitivitycategory](cil_mls_labeling_statements.md#sensitivitycategory)
  * [level](cil_mls_labeling_statements.md#level)
  * [levelrange](cil_mls_labeling_statements.md#levelrange)
  * [rangetransition](cil_mls_labeling_statements.md#rangetransition)
  * [mlsconstrain](cil_mls_labeling_statements.md#mlsconstrain)
  * [mlsvalidatetrans](cil_mls_labeling_statements.md#mlsvalidatetrans)

* [Network Labeling Statements](cil_network_labeling_statements.md#network-labeling-statements)
  * [ipaddr](cil_network_labeling_statements.md#ipaddr)
  * [netifcon](cil_network_labeling_statements.md#netifcon)
  * [nodecon](cil_network_labeling_statements.md#nodecon)
  * [portcon](cil_network_labeling_statements.md#portcon)

* [Policy Configuration Statements](cil_policy_config_statements.md#policy-configuration-statements)
  * [mls](cil_policy_config_statements.md#mls)
  * [handleunknown](cil_policy_config_statements.md#handleunknown)
  * [policycap](cil_policy_config_statements.md#policycap)

* [Role Statements](cil_role_statements.md#role-statements)
  * [role](cil_role_statements.md#role)
  * [roletype](cil_role_statements.md#roletype)
  * [roleattribute](cil_role_statements.md#roleattribute)
  * [roleattributeset](cil_role_statements.md#roleattributeset)
  * [roleallow](cil_role_statements.md#roleallow)
  * [roletransition](cil_role_statements.md#roletransition)
  * [rolebounds](cil_role_statements.md#rolebounds)

* [SID Statements](cil_sid_statements.md#sid-statements)
  * [sid](cil_sid_statements.md#sid)
  * [sidorder](cil_sid_statements.md#sidorder)
  * [sidcontext](cil_sid_statements.md#sidcontext)

* [Type Statements](cil_type_statements.md#type-statements)
  * [type](cil_type_statements.md#type)
  * [typealias](cil_type_statements.md#typealias)
  * [typealiasactual](cil_type_statements.md#typealiasactual)
  * [typeattribute](cil_type_statements.md#typeattribute)
  * [typeattributeset](cil_type_statements.md#typeattributeset)
  * [typebounds](cil_type_statements.md#typebounds)
  * [typechange](cil_type_statements.md#typechange)
  * [typemember](cil_type_statements.md#typemember)
  * [typetransition](cil_type_statements.md#typetransition)
  * [typepermissive](cil_type_statements.md#typepermissive)

* [User Statements](cil_user_statements.md#user-statements)
  * [user](cil_user_statements.md#user)
  * [userrole](cil_user_statements.md#userrole)
  * [userattribute](cil_user_statements.md#userattribute)
  * [userattributeset](cil_user_statements.md#userattributeset)
  * [userlevel](cil_user_statements.md#userlevel)
  * [userrange](cil_user_statements.md#userrange)
  * [userbounds](cil_user_statements.md#userbounds)
  * [userprefix](cil_user_statements.md#userprefix)
  * [selinuxuser](cil_user_statements.md#selinuxuser)
  * [selinuxuserdefault](cil_user_statements.md#selinuxuserdefault)

* [Infiniband Statements](cil_infiniband_statements.md#infiniband-statements)
  * [ibpkeycon](cil_infiniband_statements.md#ibpkeycon)
  * [ibendportcon](cil_infiniband_statements.md#ibendportcon)

* [Xen Statements](cil_xen_statements.md#xen-statements)
  * [iomemcon](cil_xen_statements.md#iomemcon)
  * [ioportcon](cil_xen_statements.md#ioportcon)
  * [pcidevicecon](cil_xen_statements.md#pcidevicecon)
  * [pirqcon](cil_xen_statements.md#pirqcon)
  * [devicetreecon](cil_xen_statements.md#devicetreecon)

* [Example Policy](../test/policy.cil#example-policy)