Lines Matching refs:compared_policy
4763 struct necp_kernel_socket_policy *compared_policy = policy_array[i]; in necp_kernel_socket_policy_is_unnecessary() local
4767 if (highest_skip_session_order != compared_policy->session_order || in necp_kernel_socket_policy_is_unnecessary()
4768 (highest_skip_order != 0 && compared_policy->order >= highest_skip_order)) { in necp_kernel_socket_policy_is_unnecessary()
4775 if (compared_policy->result == NECP_KERNEL_POLICY_RESULT_SKIP) { in necp_kernel_socket_policy_is_unnecessary()
4776 if (compared_policy->result_parameter.skip_policy_order > highest_skip_order) { in necp_kernel_socket_policy_is_unnecessary()
4777 highest_skip_order = compared_policy->result_parameter.skip_policy_order; in necp_kernel_socket_policy_is_unnecessary()
4784 if (compared_policy->result == NECP_KERNEL_POLICY_RESULT_SKIP) { in necp_kernel_socket_policy_is_unnecessary()
4787 highest_skip_session_order = compared_policy->session_order; in necp_kernel_socket_policy_is_unnecessary()
4788 highest_skip_order = compared_policy->result_parameter.skip_policy_order; in necp_kernel_socket_policy_is_unnecessary()
4792 if (!necp_kernel_socket_policy_results_overlap(compared_policy, policy)) { in necp_kernel_socket_policy_is_unnecessary()
4797 …if ((policy->condition_mask & NECP_KERNEL_CONDITION_ALL_INTERFACES) && !(compared_policy->conditio… in necp_kernel_socket_policy_is_unnecessary()
4802 …if ((policy->condition_mask & NECP_KERNEL_CONDITION_LOCAL_NETWORKS) && !(compared_policy->conditio… in necp_kernel_socket_policy_is_unnecessary()
4807 if (compared_policy->condition_mask == 0) { in necp_kernel_socket_policy_is_unnecessary()
4812 …if ((policy->condition_mask & compared_policy->condition_mask) != compared_policy->condition_mask)… in necp_kernel_socket_policy_is_unnecessary()
4817 …cy->condition_negated_mask & compared_policy->condition_mask) != (compared_policy->condition_negat… in necp_kernel_socket_policy_is_unnecessary()
4821 if ((compared_policy->condition_mask & NECP_KERNEL_CONDITION_DOMAIN || in necp_kernel_socket_policy_is_unnecessary()
4822 compared_policy->condition_mask & NECP_KERNEL_CONDITION_EXACT_DOMAIN) && in necp_kernel_socket_policy_is_unnecessary()
4823 strcmp(compared_policy->cond_domain, policy->cond_domain) != 0) { in necp_kernel_socket_policy_is_unnecessary()
4827 if (compared_policy->condition_mask & NECP_KERNEL_CONDITION_DOMAIN_FILTER && in necp_kernel_socket_policy_is_unnecessary()
4828 compared_policy->cond_domain_filter != policy->cond_domain_filter) { in necp_kernel_socket_policy_is_unnecessary()
4832 if (compared_policy->condition_mask & NECP_KERNEL_CONDITION_CUSTOM_ENTITLEMENT && in necp_kernel_socket_policy_is_unnecessary()
4833 strcmp(compared_policy->cond_custom_entitlement, policy->cond_custom_entitlement) != 0) { in necp_kernel_socket_policy_is_unnecessary()
4837 if (compared_policy->condition_mask & NECP_KERNEL_CONDITION_ACCOUNT_ID && in necp_kernel_socket_policy_is_unnecessary()
4838 compared_policy->cond_account_id != policy->cond_account_id) { in necp_kernel_socket_policy_is_unnecessary()
4842 if (compared_policy->condition_mask & NECP_KERNEL_CONDITION_POLICY_ID && in necp_kernel_socket_policy_is_unnecessary()
4843 compared_policy->cond_policy_id != policy->cond_policy_id) { in necp_kernel_socket_policy_is_unnecessary()
4847 if (compared_policy->condition_mask & NECP_KERNEL_CONDITION_APP_ID && in necp_kernel_socket_policy_is_unnecessary()
4848 compared_policy->cond_app_id != policy->cond_app_id) { in necp_kernel_socket_policy_is_unnecessary()
4852 if (compared_policy->condition_mask & NECP_KERNEL_CONDITION_REAL_APP_ID && in necp_kernel_socket_policy_is_unnecessary()
4853 compared_policy->cond_real_app_id != policy->cond_real_app_id) { in necp_kernel_socket_policy_is_unnecessary()
4857 if (compared_policy->condition_mask & NECP_KERNEL_CONDITION_PID && in necp_kernel_socket_policy_is_unnecessary()
4858 …(compared_policy->cond_pid != policy->cond_pid || compared_policy->cond_pid_version != policy->con… in necp_kernel_socket_policy_is_unnecessary()
4862 if (compared_policy->condition_mask & NECP_KERNEL_CONDITION_UID && in necp_kernel_socket_policy_is_unnecessary()
4863 compared_policy->cond_uid != policy->cond_uid) { in necp_kernel_socket_policy_is_unnecessary()
4867 if (compared_policy->condition_mask & NECP_KERNEL_CONDITION_BOUND_INTERFACE && in necp_kernel_socket_policy_is_unnecessary()
4868 compared_policy->cond_bound_interface != policy->cond_bound_interface) { in necp_kernel_socket_policy_is_unnecessary()
4872 if (compared_policy->condition_mask & NECP_KERNEL_CONDITION_PROTOCOL && in necp_kernel_socket_policy_is_unnecessary()
4873 compared_policy->cond_protocol != policy->cond_protocol) { in necp_kernel_socket_policy_is_unnecessary()
4877 if (compared_policy->condition_mask & NECP_KERNEL_CONDITION_CLIENT_FLAGS && in necp_kernel_socket_policy_is_unnecessary()
4878 compared_policy->cond_client_flags != policy->cond_client_flags) { in necp_kernel_socket_policy_is_unnecessary()
4882 if (compared_policy->condition_mask & NECP_KERNEL_CONDITION_TRAFFIC_CLASS && in necp_kernel_socket_policy_is_unnecessary()
4883 !(compared_policy->cond_traffic_class.start_tc <= policy->cond_traffic_class.start_tc && in necp_kernel_socket_policy_is_unnecessary()
4884 compared_policy->cond_traffic_class.end_tc >= policy->cond_traffic_class.end_tc)) { in necp_kernel_socket_policy_is_unnecessary()
4888 if (compared_policy->condition_mask & NECP_KERNEL_CONDITION_LOCAL_START) { in necp_kernel_socket_policy_is_unnecessary()
4889 if (compared_policy->condition_mask & NECP_KERNEL_CONDITION_LOCAL_END) { in necp_kernel_socket_policy_is_unnecessary()
4890 …icy->cond_local_end, (struct sockaddr *)&compared_policy->cond_local_start, (struct sockaddr *)&co… in necp_kernel_socket_policy_is_unnecessary()
4893 } else if (compared_policy->condition_mask & NECP_KERNEL_CONDITION_LOCAL_PREFIX) { in necp_kernel_socket_policy_is_unnecessary()
4894 if (compared_policy->cond_local_prefix > policy->cond_local_prefix || in necp_kernel_socket_policy_is_unnecessary()
4895 …r *)&policy->cond_local_start, (struct sockaddr *)&compared_policy->cond_local_start, compared_pol… in necp_kernel_socket_policy_is_unnecessary()
4901 if (compared_policy->condition_mask & NECP_KERNEL_CONDITION_REMOTE_START) { in necp_kernel_socket_policy_is_unnecessary()
4902 if (compared_policy->condition_mask & NECP_KERNEL_CONDITION_REMOTE_END) { in necp_kernel_socket_policy_is_unnecessary()
4903 …cy->cond_remote_end, (struct sockaddr *)&compared_policy->cond_remote_start, (struct sockaddr *)&c… in necp_kernel_socket_policy_is_unnecessary()
4906 } else if (compared_policy->condition_mask & NECP_KERNEL_CONDITION_REMOTE_PREFIX) { in necp_kernel_socket_policy_is_unnecessary()
4907 if (compared_policy->cond_remote_prefix > policy->cond_remote_prefix || in necp_kernel_socket_policy_is_unnecessary()
4908 … *)&policy->cond_remote_start, (struct sockaddr *)&compared_policy->cond_remote_start, compared_po… in necp_kernel_socket_policy_is_unnecessary()
4914 if (compared_policy->condition_mask & NECP_KERNEL_CONDITION_AGENT_TYPE && in necp_kernel_socket_policy_is_unnecessary()
4915 …memcmp(&compared_policy->cond_agent_type, &policy->cond_agent_type, sizeof(policy->cond_agent_type… in necp_kernel_socket_policy_is_unnecessary()
4919 if (compared_policy->condition_mask & NECP_KERNEL_CONDITION_SDK_VERSION && in necp_kernel_socket_policy_is_unnecessary()
4920 …memcmp(&compared_policy->cond_sdk_version, &policy->cond_sdk_version, sizeof(policy->cond_sdk_vers… in necp_kernel_socket_policy_is_unnecessary()
4924 if (compared_policy->condition_mask & NECP_KERNEL_CONDITION_PACKET_FILTER_TAGS && in necp_kernel_socket_policy_is_unnecessary()
4925 …memcmp(&compared_policy->cond_packet_filter_tags, &policy->cond_packet_filter_tags, sizeof(policy-… in necp_kernel_socket_policy_is_unnecessary()
4929 if (compared_policy->condition_mask & NECP_KERNEL_CONDITION_SCHEME_PORT && in necp_kernel_socket_policy_is_unnecessary()
4930 …memcmp(&compared_policy->cond_scheme_port, &policy->cond_scheme_port, sizeof(policy->cond_scheme_p… in necp_kernel_socket_policy_is_unnecessary()
6208 struct necp_kernel_ip_output_policy *compared_policy = policy_array[i]; in necp_kernel_ip_output_policy_is_unnecessary() local
6212 if (highest_skip_session_order != compared_policy->session_order || in necp_kernel_ip_output_policy_is_unnecessary()
6213 (highest_skip_order != 0 && compared_policy->order >= highest_skip_order)) { in necp_kernel_ip_output_policy_is_unnecessary()
6220 if (compared_policy->result == NECP_KERNEL_POLICY_RESULT_SKIP) { in necp_kernel_ip_output_policy_is_unnecessary()
6221 if (compared_policy->result_parameter.skip_policy_order > highest_skip_order) { in necp_kernel_ip_output_policy_is_unnecessary()
6222 highest_skip_order = compared_policy->result_parameter.skip_policy_order; in necp_kernel_ip_output_policy_is_unnecessary()
6229 if (compared_policy->result == NECP_KERNEL_POLICY_RESULT_SKIP) { in necp_kernel_ip_output_policy_is_unnecessary()
6232 highest_skip_session_order = compared_policy->session_order; in necp_kernel_ip_output_policy_is_unnecessary()
6233 highest_skip_order = compared_policy->result_parameter.skip_policy_order; in necp_kernel_ip_output_policy_is_unnecessary()
6237 if (!necp_kernel_ip_output_policy_results_overlap(compared_policy, policy)) { in necp_kernel_ip_output_policy_is_unnecessary()
6242 …if ((policy->condition_mask & NECP_KERNEL_CONDITION_ALL_INTERFACES) && !(compared_policy->conditio… in necp_kernel_ip_output_policy_is_unnecessary()
6247 …if ((policy->condition_mask & NECP_KERNEL_CONDITION_LOCAL_NETWORKS) && !(compared_policy->conditio… in necp_kernel_ip_output_policy_is_unnecessary()
6252 if (compared_policy->condition_mask == 0) { in necp_kernel_ip_output_policy_is_unnecessary()
6257 …if ((policy->condition_mask & compared_policy->condition_mask) != compared_policy->condition_mask)… in necp_kernel_ip_output_policy_is_unnecessary()
6262 …cy->condition_negated_mask & compared_policy->condition_mask) != (compared_policy->condition_negat… in necp_kernel_ip_output_policy_is_unnecessary()
6266 if (compared_policy->condition_mask & NECP_KERNEL_CONDITION_POLICY_ID && in necp_kernel_ip_output_policy_is_unnecessary()
6267 compared_policy->cond_policy_id != policy->cond_policy_id) { in necp_kernel_ip_output_policy_is_unnecessary()
6271 if (compared_policy->condition_mask & NECP_KERNEL_CONDITION_BOUND_INTERFACE && in necp_kernel_ip_output_policy_is_unnecessary()
6272 compared_policy->cond_bound_interface != policy->cond_bound_interface) { in necp_kernel_ip_output_policy_is_unnecessary()
6276 if (compared_policy->condition_mask & NECP_KERNEL_CONDITION_PROTOCOL && in necp_kernel_ip_output_policy_is_unnecessary()
6277 compared_policy->cond_protocol != policy->cond_protocol) { in necp_kernel_ip_output_policy_is_unnecessary()
6281 if (compared_policy->condition_mask & NECP_KERNEL_CONDITION_LOCAL_START) { in necp_kernel_ip_output_policy_is_unnecessary()
6282 if (compared_policy->condition_mask & NECP_KERNEL_CONDITION_LOCAL_END) { in necp_kernel_ip_output_policy_is_unnecessary()
6283 …icy->cond_local_end, (struct sockaddr *)&compared_policy->cond_local_start, (struct sockaddr *)&co… in necp_kernel_ip_output_policy_is_unnecessary()
6286 } else if (compared_policy->condition_mask & NECP_KERNEL_CONDITION_LOCAL_PREFIX) { in necp_kernel_ip_output_policy_is_unnecessary()
6287 if (compared_policy->cond_local_prefix > policy->cond_local_prefix || in necp_kernel_ip_output_policy_is_unnecessary()
6288 …r *)&policy->cond_local_start, (struct sockaddr *)&compared_policy->cond_local_start, compared_pol… in necp_kernel_ip_output_policy_is_unnecessary()
6294 if (compared_policy->condition_mask & NECP_KERNEL_CONDITION_REMOTE_START) { in necp_kernel_ip_output_policy_is_unnecessary()
6295 if (compared_policy->condition_mask & NECP_KERNEL_CONDITION_REMOTE_END) { in necp_kernel_ip_output_policy_is_unnecessary()
6296 …cy->cond_remote_end, (struct sockaddr *)&compared_policy->cond_remote_start, (struct sockaddr *)&c… in necp_kernel_ip_output_policy_is_unnecessary()
6299 } else if (compared_policy->condition_mask & NECP_KERNEL_CONDITION_REMOTE_PREFIX) { in necp_kernel_ip_output_policy_is_unnecessary()
6300 if (compared_policy->cond_remote_prefix > policy->cond_remote_prefix || in necp_kernel_ip_output_policy_is_unnecessary()
6301 … *)&policy->cond_remote_start, (struct sockaddr *)&compared_policy->cond_remote_start, compared_po… in necp_kernel_ip_output_policy_is_unnecessary()
6307 if (compared_policy->condition_mask & NECP_KERNEL_CONDITION_SCHEME_PORT && in necp_kernel_ip_output_policy_is_unnecessary()
6308 compared_policy->cond_scheme_port != policy->cond_scheme_port) { in necp_kernel_ip_output_policy_is_unnecessary()