Lines Matching refs:compared_policy
5041 struct necp_kernel_socket_policy *compared_policy = policy_array[i]; in necp_kernel_socket_policy_is_unnecessary() local
5045 if (highest_skip_session_order != compared_policy->session_order || in necp_kernel_socket_policy_is_unnecessary()
5046 (highest_skip_order != 0 && compared_policy->order >= highest_skip_order)) { in necp_kernel_socket_policy_is_unnecessary()
5053 if (compared_policy->result == NECP_KERNEL_POLICY_RESULT_SKIP) { in necp_kernel_socket_policy_is_unnecessary()
5054 if (compared_policy->result_parameter.skip_policy_order > highest_skip_order) { in necp_kernel_socket_policy_is_unnecessary()
5055 highest_skip_order = compared_policy->result_parameter.skip_policy_order; in necp_kernel_socket_policy_is_unnecessary()
5062 if (compared_policy->result == NECP_KERNEL_POLICY_RESULT_SKIP) { in necp_kernel_socket_policy_is_unnecessary()
5065 highest_skip_session_order = compared_policy->session_order; in necp_kernel_socket_policy_is_unnecessary()
5066 highest_skip_order = compared_policy->result_parameter.skip_policy_order; in necp_kernel_socket_policy_is_unnecessary()
5070 if (!necp_kernel_socket_policy_results_overlap(compared_policy, policy)) { in necp_kernel_socket_policy_is_unnecessary()
5075 …if ((policy->condition_mask & NECP_KERNEL_CONDITION_ALL_INTERFACES) && !(compared_policy->conditio… in necp_kernel_socket_policy_is_unnecessary()
5080 …if ((policy->condition_mask & NECP_KERNEL_CONDITION_LOCAL_NETWORKS) && !(compared_policy->conditio… in necp_kernel_socket_policy_is_unnecessary()
5085 if (compared_policy->condition_mask == 0) { in necp_kernel_socket_policy_is_unnecessary()
5090 …if ((policy->condition_mask & compared_policy->condition_mask) != compared_policy->condition_mask)… in necp_kernel_socket_policy_is_unnecessary()
5095 …cy->condition_negated_mask & compared_policy->condition_mask) != (compared_policy->condition_negat… in necp_kernel_socket_policy_is_unnecessary()
5099 if ((compared_policy->condition_mask & NECP_KERNEL_CONDITION_DOMAIN || in necp_kernel_socket_policy_is_unnecessary()
5100 compared_policy->condition_mask & NECP_KERNEL_CONDITION_EXACT_DOMAIN) && in necp_kernel_socket_policy_is_unnecessary()
5101 strcmp(compared_policy->cond_domain, policy->cond_domain) != 0) { in necp_kernel_socket_policy_is_unnecessary()
5105 if (compared_policy->condition_mask & NECP_KERNEL_CONDITION_DOMAIN_FILTER && in necp_kernel_socket_policy_is_unnecessary()
5106 compared_policy->cond_domain_filter != policy->cond_domain_filter) { in necp_kernel_socket_policy_is_unnecessary()
5110 if (compared_policy->condition_mask & NECP_KERNEL_CONDITION_URL && in necp_kernel_socket_policy_is_unnecessary()
5111 strcmp(compared_policy->cond_url, policy->cond_url) != 0) { in necp_kernel_socket_policy_is_unnecessary()
5115 if (compared_policy->condition_mask & NECP_KERNEL_CONDITION_CUSTOM_ENTITLEMENT && in necp_kernel_socket_policy_is_unnecessary()
5116 strcmp(compared_policy->cond_custom_entitlement, policy->cond_custom_entitlement) != 0) { in necp_kernel_socket_policy_is_unnecessary()
5120 if (compared_policy->condition_mask & NECP_KERNEL_CONDITION_ACCOUNT_ID && in necp_kernel_socket_policy_is_unnecessary()
5121 compared_policy->cond_account_id != policy->cond_account_id) { in necp_kernel_socket_policy_is_unnecessary()
5125 if (compared_policy->condition_mask & NECP_KERNEL_CONDITION_POLICY_ID && in necp_kernel_socket_policy_is_unnecessary()
5126 compared_policy->cond_policy_id != policy->cond_policy_id) { in necp_kernel_socket_policy_is_unnecessary()
5130 if (compared_policy->condition_mask & NECP_KERNEL_CONDITION_APP_ID && in necp_kernel_socket_policy_is_unnecessary()
5131 compared_policy->cond_app_id != policy->cond_app_id) { in necp_kernel_socket_policy_is_unnecessary()
5135 if (compared_policy->condition_mask & NECP_KERNEL_CONDITION_REAL_APP_ID && in necp_kernel_socket_policy_is_unnecessary()
5136 compared_policy->cond_real_app_id != policy->cond_real_app_id) { in necp_kernel_socket_policy_is_unnecessary()
5140 if (compared_policy->condition_mask & NECP_KERNEL_CONDITION_PID && in necp_kernel_socket_policy_is_unnecessary()
5141 …(compared_policy->cond_pid != policy->cond_pid || compared_policy->cond_pid_version != policy->con… in necp_kernel_socket_policy_is_unnecessary()
5145 if (compared_policy->condition_mask & NECP_KERNEL_CONDITION_UID && in necp_kernel_socket_policy_is_unnecessary()
5146 compared_policy->cond_uid != policy->cond_uid) { in necp_kernel_socket_policy_is_unnecessary()
5150 if (compared_policy->condition_mask & NECP_KERNEL_CONDITION_REAL_UID && in necp_kernel_socket_policy_is_unnecessary()
5151 compared_policy->cond_real_uid != policy->cond_real_uid) { in necp_kernel_socket_policy_is_unnecessary()
5155 if (compared_policy->condition_mask & NECP_KERNEL_CONDITION_BOUND_INTERFACE && in necp_kernel_socket_policy_is_unnecessary()
5156 compared_policy->cond_bound_interface != policy->cond_bound_interface) { in necp_kernel_socket_policy_is_unnecessary()
5160 if (compared_policy->condition_mask & NECP_KERNEL_CONDITION_PROTOCOL && in necp_kernel_socket_policy_is_unnecessary()
5161 compared_policy->cond_protocol != policy->cond_protocol) { in necp_kernel_socket_policy_is_unnecessary()
5165 if (compared_policy->condition_mask & NECP_KERNEL_CONDITION_CLIENT_FLAGS && in necp_kernel_socket_policy_is_unnecessary()
5166 compared_policy->cond_client_flags != policy->cond_client_flags) { in necp_kernel_socket_policy_is_unnecessary()
5170 if (compared_policy->condition_mask & NECP_KERNEL_CONDITION_TRAFFIC_CLASS && in necp_kernel_socket_policy_is_unnecessary()
5171 !(compared_policy->cond_traffic_class.start_tc <= policy->cond_traffic_class.start_tc && in necp_kernel_socket_policy_is_unnecessary()
5172 compared_policy->cond_traffic_class.end_tc >= policy->cond_traffic_class.end_tc)) { in necp_kernel_socket_policy_is_unnecessary()
5176 if (compared_policy->condition_mask & NECP_KERNEL_CONDITION_LOCAL_START) { in necp_kernel_socket_policy_is_unnecessary()
5177 if (compared_policy->condition_mask & NECP_KERNEL_CONDITION_LOCAL_END) { in necp_kernel_socket_policy_is_unnecessary()
5178 …icy->cond_local_end, (struct sockaddr *)&compared_policy->cond_local_start, (struct sockaddr *)&co… in necp_kernel_socket_policy_is_unnecessary()
5181 } else if (compared_policy->condition_mask & NECP_KERNEL_CONDITION_LOCAL_PREFIX) { in necp_kernel_socket_policy_is_unnecessary()
5182 if (compared_policy->cond_local_prefix > policy->cond_local_prefix || in necp_kernel_socket_policy_is_unnecessary()
5183 …r *)&policy->cond_local_start, (struct sockaddr *)&compared_policy->cond_local_start, compared_pol… in necp_kernel_socket_policy_is_unnecessary()
5189 if (compared_policy->condition_mask & NECP_KERNEL_CONDITION_REMOTE_START) { in necp_kernel_socket_policy_is_unnecessary()
5190 if (compared_policy->condition_mask & NECP_KERNEL_CONDITION_REMOTE_END) { in necp_kernel_socket_policy_is_unnecessary()
5191 …cy->cond_remote_end, (struct sockaddr *)&compared_policy->cond_remote_start, (struct sockaddr *)&c… in necp_kernel_socket_policy_is_unnecessary()
5194 } else if (compared_policy->condition_mask & NECP_KERNEL_CONDITION_REMOTE_PREFIX) { in necp_kernel_socket_policy_is_unnecessary()
5195 if (compared_policy->cond_remote_prefix > policy->cond_remote_prefix || in necp_kernel_socket_policy_is_unnecessary()
5196 … *)&policy->cond_remote_start, (struct sockaddr *)&compared_policy->cond_remote_start, compared_po… in necp_kernel_socket_policy_is_unnecessary()
5202 if (compared_policy->condition_mask & NECP_KERNEL_CONDITION_AGENT_TYPE && in necp_kernel_socket_policy_is_unnecessary()
5203 …memcmp(&compared_policy->cond_agent_type, &policy->cond_agent_type, sizeof(policy->cond_agent_type… in necp_kernel_socket_policy_is_unnecessary()
5207 if (compared_policy->condition_mask & NECP_KERNEL_CONDITION_SDK_VERSION && in necp_kernel_socket_policy_is_unnecessary()
5208 …memcmp(&compared_policy->cond_sdk_version, &policy->cond_sdk_version, sizeof(policy->cond_sdk_vers… in necp_kernel_socket_policy_is_unnecessary()
5212 if (compared_policy->condition_mask & NECP_KERNEL_CONDITION_PACKET_FILTER_TAGS && in necp_kernel_socket_policy_is_unnecessary()
5213 …memcmp(&compared_policy->cond_packet_filter_tags, &policy->cond_packet_filter_tags, sizeof(policy-… in necp_kernel_socket_policy_is_unnecessary()
5217 if (compared_policy->condition_mask & NECP_KERNEL_CONDITION_SCHEME_PORT && in necp_kernel_socket_policy_is_unnecessary()
5218 …memcmp(&compared_policy->cond_scheme_port, &policy->cond_scheme_port, sizeof(policy->cond_scheme_p… in necp_kernel_socket_policy_is_unnecessary()
5222 if (compared_policy->condition_mask & NECP_KERNEL_CONDITION_BOUND_INTERFACE_FLAGS && in necp_kernel_socket_policy_is_unnecessary()
5223 (compared_policy->cond_bound_interface_flags != policy->cond_bound_interface_flags || in necp_kernel_socket_policy_is_unnecessary()
5224 compared_policy->cond_bound_interface_eflags != policy->cond_bound_interface_eflags || in necp_kernel_socket_policy_is_unnecessary()
5225 compared_policy->cond_bound_interface_xflags != policy->cond_bound_interface_xflags)) { in necp_kernel_socket_policy_is_unnecessary()
6533 struct necp_kernel_ip_output_policy *compared_policy = policy_array[i]; in necp_kernel_ip_output_policy_is_unnecessary() local
6537 if (highest_skip_session_order != compared_policy->session_order || in necp_kernel_ip_output_policy_is_unnecessary()
6538 (highest_skip_order != 0 && compared_policy->order >= highest_skip_order)) { in necp_kernel_ip_output_policy_is_unnecessary()
6545 if (compared_policy->result == NECP_KERNEL_POLICY_RESULT_SKIP) { in necp_kernel_ip_output_policy_is_unnecessary()
6546 if (compared_policy->result_parameter.skip_policy_order > highest_skip_order) { in necp_kernel_ip_output_policy_is_unnecessary()
6547 highest_skip_order = compared_policy->result_parameter.skip_policy_order; in necp_kernel_ip_output_policy_is_unnecessary()
6554 if (compared_policy->result == NECP_KERNEL_POLICY_RESULT_SKIP) { in necp_kernel_ip_output_policy_is_unnecessary()
6557 highest_skip_session_order = compared_policy->session_order; in necp_kernel_ip_output_policy_is_unnecessary()
6558 highest_skip_order = compared_policy->result_parameter.skip_policy_order; in necp_kernel_ip_output_policy_is_unnecessary()
6562 if (!necp_kernel_ip_output_policy_results_overlap(compared_policy, policy)) { in necp_kernel_ip_output_policy_is_unnecessary()
6567 …if ((policy->condition_mask & NECP_KERNEL_CONDITION_ALL_INTERFACES) && !(compared_policy->conditio… in necp_kernel_ip_output_policy_is_unnecessary()
6572 …if ((policy->condition_mask & NECP_KERNEL_CONDITION_LOCAL_NETWORKS) && !(compared_policy->conditio… in necp_kernel_ip_output_policy_is_unnecessary()
6577 if (compared_policy->condition_mask == 0) { in necp_kernel_ip_output_policy_is_unnecessary()
6582 …if ((policy->condition_mask & compared_policy->condition_mask) != compared_policy->condition_mask)… in necp_kernel_ip_output_policy_is_unnecessary()
6587 …cy->condition_negated_mask & compared_policy->condition_mask) != (compared_policy->condition_negat… in necp_kernel_ip_output_policy_is_unnecessary()
6591 if (compared_policy->condition_mask & NECP_KERNEL_CONDITION_POLICY_ID && in necp_kernel_ip_output_policy_is_unnecessary()
6592 compared_policy->cond_policy_id != policy->cond_policy_id) { in necp_kernel_ip_output_policy_is_unnecessary()
6596 if (compared_policy->condition_mask & NECP_KERNEL_CONDITION_BOUND_INTERFACE && in necp_kernel_ip_output_policy_is_unnecessary()
6597 compared_policy->cond_bound_interface != policy->cond_bound_interface) { in necp_kernel_ip_output_policy_is_unnecessary()
6601 if (compared_policy->condition_mask & NECP_KERNEL_CONDITION_PROTOCOL && in necp_kernel_ip_output_policy_is_unnecessary()
6602 compared_policy->cond_protocol != policy->cond_protocol) { in necp_kernel_ip_output_policy_is_unnecessary()
6606 if (compared_policy->condition_mask & NECP_KERNEL_CONDITION_LOCAL_START) { in necp_kernel_ip_output_policy_is_unnecessary()
6607 if (compared_policy->condition_mask & NECP_KERNEL_CONDITION_LOCAL_END) { in necp_kernel_ip_output_policy_is_unnecessary()
6608 …icy->cond_local_end, (struct sockaddr *)&compared_policy->cond_local_start, (struct sockaddr *)&co… in necp_kernel_ip_output_policy_is_unnecessary()
6611 } else if (compared_policy->condition_mask & NECP_KERNEL_CONDITION_LOCAL_PREFIX) { in necp_kernel_ip_output_policy_is_unnecessary()
6612 if (compared_policy->cond_local_prefix > policy->cond_local_prefix || in necp_kernel_ip_output_policy_is_unnecessary()
6613 …r *)&policy->cond_local_start, (struct sockaddr *)&compared_policy->cond_local_start, compared_pol… in necp_kernel_ip_output_policy_is_unnecessary()
6619 if (compared_policy->condition_mask & NECP_KERNEL_CONDITION_REMOTE_START) { in necp_kernel_ip_output_policy_is_unnecessary()
6620 if (compared_policy->condition_mask & NECP_KERNEL_CONDITION_REMOTE_END) { in necp_kernel_ip_output_policy_is_unnecessary()
6621 …cy->cond_remote_end, (struct sockaddr *)&compared_policy->cond_remote_start, (struct sockaddr *)&c… in necp_kernel_ip_output_policy_is_unnecessary()
6624 } else if (compared_policy->condition_mask & NECP_KERNEL_CONDITION_REMOTE_PREFIX) { in necp_kernel_ip_output_policy_is_unnecessary()
6625 if (compared_policy->cond_remote_prefix > policy->cond_remote_prefix || in necp_kernel_ip_output_policy_is_unnecessary()
6626 … *)&policy->cond_remote_start, (struct sockaddr *)&compared_policy->cond_remote_start, compared_po… in necp_kernel_ip_output_policy_is_unnecessary()
6632 if (compared_policy->condition_mask & NECP_KERNEL_CONDITION_SCHEME_PORT && in necp_kernel_ip_output_policy_is_unnecessary()
6633 compared_policy->cond_scheme_port != policy->cond_scheme_port) { in necp_kernel_ip_output_policy_is_unnecessary()
6637 if (compared_policy->condition_mask & NECP_KERNEL_CONDITION_BOUND_INTERFACE_FLAGS && in necp_kernel_ip_output_policy_is_unnecessary()
6638 (compared_policy->cond_bound_interface_flags != policy->cond_bound_interface_flags || in necp_kernel_ip_output_policy_is_unnecessary()
6639 compared_policy->cond_bound_interface_eflags != policy->cond_bound_interface_eflags || in necp_kernel_ip_output_policy_is_unnecessary()
6640 compared_policy->cond_bound_interface_xflags != policy->cond_bound_interface_xflags)) { in necp_kernel_ip_output_policy_is_unnecessary()