Lines Matching refs:condition_mask
433 …icy_order order, u_int32_t session_order, int session_pid, u_int64_t condition_mask, u_int64_t con…
439 …_order suborder, u_int32_t session_order, int session_pid, u_int64_t condition_mask, u_int64_t con…
654 …esultString[policy_search_array[i]->result], policy_search_array[i]->condition_mask & NECP_KERNEL_…
2907 u_int64_t condition_mask = policy->condition_mask; in necp_handle_policy_dump_all() local
2914 if (condition_mask == NECP_POLICY_CONDITION_DEFAULT) { in necp_handle_policy_dump_all()
2917 if (condition_mask & NECP_KERNEL_CONDITION_ALL_INTERFACES) { in necp_handle_policy_dump_all()
2920 if (condition_mask & NECP_KERNEL_CONDITION_HAS_CLIENT) { in necp_handle_policy_dump_all()
2923 if (condition_mask & NECP_KERNEL_CONDITION_BOUND_INTERFACE) { in necp_handle_policy_dump_all()
2928 if (condition_mask & NECP_KERNEL_CONDITION_PROTOCOL) { in necp_handle_policy_dump_all()
2932 if (condition_mask & NECP_KERNEL_CONDITION_APP_ID) { in necp_handle_policy_dump_all()
2936 if (condition_mask & NECP_KERNEL_CONDITION_REAL_APP_ID) { in necp_handle_policy_dump_all()
2940 if ((condition_mask & NECP_KERNEL_CONDITION_DOMAIN) || in necp_handle_policy_dump_all()
2941 (condition_mask & NECP_KERNEL_CONDITION_EXACT_DOMAIN)) { in necp_handle_policy_dump_all()
2946 if (condition_mask & NECP_KERNEL_CONDITION_DOMAIN_FILTER) { in necp_handle_policy_dump_all()
2950 if (condition_mask & NECP_KERNEL_CONDITION_ACCOUNT_ID) { in necp_handle_policy_dump_all()
2959 if (condition_mask & NECP_KERNEL_CONDITION_PID) { in necp_handle_policy_dump_all()
2963 if (condition_mask & NECP_KERNEL_CONDITION_UID) { in necp_handle_policy_dump_all()
2967 if (condition_mask & NECP_KERNEL_CONDITION_TRAFFIC_CLASS) { in necp_handle_policy_dump_all()
2971 if (condition_mask & NECP_KERNEL_CONDITION_ENTITLEMENT) { in necp_handle_policy_dump_all()
2974 if (condition_mask & NECP_KERNEL_CONDITION_CUSTOM_ENTITLEMENT) { in necp_handle_policy_dump_all()
2979 if (condition_mask & NECP_KERNEL_CONDITION_PLATFORM_BINARY) { in necp_handle_policy_dump_all()
2982 if (condition_mask & NECP_KERNEL_CONDITION_SYSTEM_SIGNED_RESULT) { in necp_handle_policy_dump_all()
2985 if (condition_mask & NECP_KERNEL_CONDITION_SDK_VERSION) { in necp_handle_policy_dump_all()
2989 if (condition_mask & NECP_KERNEL_CONDITION_LOCAL_NETWORKS) { in necp_handle_policy_dump_all()
2992 if (condition_mask & NECP_KERNEL_CONDITION_LOCAL_START) { in necp_handle_policy_dump_all()
2993 if (condition_mask & NECP_KERNEL_CONDITION_LOCAL_END) { in necp_handle_policy_dump_all()
3000 if (condition_mask & NECP_KERNEL_CONDITION_REMOTE_START) { in necp_handle_policy_dump_all()
3001 if (condition_mask & NECP_KERNEL_CONDITION_REMOTE_END) { in necp_handle_policy_dump_all()
3008 if (condition_mask & NECP_KERNEL_CONDITION_AGENT_TYPE) { in necp_handle_policy_dump_all()
3012 if (condition_mask & NECP_KERNEL_CONDITION_CLIENT_FLAGS) { in necp_handle_policy_dump_all()
3016 if (condition_mask & NECP_KERNEL_CONDITION_LOCAL_EMPTY) { in necp_handle_policy_dump_all()
3019 if (condition_mask & NECP_KERNEL_CONDITION_REMOTE_EMPTY) { in necp_handle_policy_dump_all()
3022 if (condition_mask & NECP_KERNEL_CONDITION_SIGNING_IDENTIFIER) { in necp_handle_policy_dump_all()
3027 if (condition_mask & NECP_KERNEL_CONDITION_PACKET_FILTER_TAGS) { in necp_handle_policy_dump_all()
3031 if (condition_mask & NECP_KERNEL_CONDITION_IS_LOOPBACK) { in necp_handle_policy_dump_all()
3034 if (condition_mask & NECP_KERNEL_CONDITION_DELEGATE_IS_PLATFORM_BINARY) { in necp_handle_policy_dump_all()
3037 if (condition_mask & NECP_KERNEL_CONDITION_SCHEME_PORT) { in necp_handle_policy_dump_all()
3077 if (condition_mask == NECP_POLICY_CONDITION_DEFAULT) { in necp_handle_policy_dump_all()
3080 if (condition_mask & NECP_KERNEL_CONDITION_ALL_INTERFACES) { in necp_handle_policy_dump_all()
3083 if (condition_mask & NECP_KERNEL_CONDITION_HAS_CLIENT) { in necp_handle_policy_dump_all()
3086 if (condition_mask & NECP_KERNEL_CONDITION_LOCAL_NETWORKS) { in necp_handle_policy_dump_all()
3089 if (condition_mask & NECP_KERNEL_CONDITION_BOUND_INTERFACE) { in necp_handle_policy_dump_all()
3093 if (condition_mask & NECP_KERNEL_CONDITION_PROTOCOL) { in necp_handle_policy_dump_all()
3097 if (condition_mask & NECP_KERNEL_CONDITION_APP_ID) { in necp_handle_policy_dump_all()
3104 if (condition_mask & NECP_KERNEL_CONDITION_REAL_APP_ID) { in necp_handle_policy_dump_all()
3111 if ((condition_mask & NECP_KERNEL_CONDITION_DOMAIN) || in necp_handle_policy_dump_all()
3112 (condition_mask & NECP_KERNEL_CONDITION_EXACT_DOMAIN)) { in necp_handle_policy_dump_all()
3116 if (condition_mask & NECP_KERNEL_CONDITION_DOMAIN_FILTER) { in necp_handle_policy_dump_all()
3120 if (condition_mask & NECP_KERNEL_CONDITION_ACCOUNT_ID) { in necp_handle_policy_dump_all()
3126 if (condition_mask & NECP_KERNEL_CONDITION_PID) { in necp_handle_policy_dump_all()
3133 if (condition_mask & NECP_KERNEL_CONDITION_UID) { in necp_handle_policy_dump_all()
3137 if (condition_mask & NECP_KERNEL_CONDITION_TRAFFIC_CLASS) { in necp_handle_policy_dump_all()
3141 if (condition_mask & NECP_KERNEL_CONDITION_ENTITLEMENT) { in necp_handle_policy_dump_all()
3145 if (condition_mask & NECP_KERNEL_CONDITION_CUSTOM_ENTITLEMENT) { in necp_handle_policy_dump_all()
3149 if (condition_mask & NECP_KERNEL_CONDITION_PLATFORM_BINARY) { in necp_handle_policy_dump_all()
3152 if (condition_mask & NECP_KERNEL_CONDITION_SYSTEM_SIGNED_RESULT) { in necp_handle_policy_dump_all()
3155 if (condition_mask & NECP_KERNEL_CONDITION_SDK_VERSION) { in necp_handle_policy_dump_all()
3160 if (condition_mask & NECP_KERNEL_CONDITION_LOCAL_START) { in necp_handle_policy_dump_all()
3161 if (condition_mask & NECP_KERNEL_CONDITION_LOCAL_END) { in necp_handle_policy_dump_all()
3175 if (condition_mask & NECP_KERNEL_CONDITION_REMOTE_START) { in necp_handle_policy_dump_all()
3176 if (condition_mask & NECP_KERNEL_CONDITION_REMOTE_END) { in necp_handle_policy_dump_all()
3190 if (condition_mask & NECP_KERNEL_CONDITION_AGENT_TYPE) { in necp_handle_policy_dump_all()
3195 if (condition_mask & NECP_KERNEL_CONDITION_CLIENT_FLAGS) { in necp_handle_policy_dump_all()
3198 if (condition_mask & NECP_KERNEL_CONDITION_LOCAL_EMPTY) { in necp_handle_policy_dump_all()
3201 if (condition_mask & NECP_KERNEL_CONDITION_REMOTE_EMPTY) { in necp_handle_policy_dump_all()
3204 if (condition_mask & NECP_KERNEL_CONDITION_SIGNING_IDENTIFIER) { in necp_handle_policy_dump_all()
3208 if (condition_mask & NECP_KERNEL_CONDITION_PACKET_FILTER_TAGS) { in necp_handle_policy_dump_all()
3211 if (condition_mask & NECP_KERNEL_CONDITION_IS_LOOPBACK) { in necp_handle_policy_dump_all()
3214 if (condition_mask & NECP_KERNEL_CONDITION_DELEGATE_IS_PLATFORM_BINARY) { in necp_handle_policy_dump_all()
3217 if (condition_mask & NECP_KERNEL_CONDITION_SCHEME_PORT) { in necp_handle_policy_dump_all()
4153 u_int64_t condition_mask = master_condition_mask; in necp_policy_apply() local
4155 condition_mask |= NECP_KERNEL_CONDITION_POLICY_ID; in necp_policy_apply()
4158 …BORDER_NON_ID_CONDITIONS, session->session_order, session->proc_pid, condition_mask, master_condit… in necp_policy_apply()
4313 …icy_order order, u_int32_t session_order, int session_pid, u_int64_t condition_mask, u_int64_t con… in necp_kernel_socket_policy_add() argument
4326 new_kernel_policy->condition_mask = (condition_mask & NECP_KERNEL_VALID_SOCKET_CONDITIONS); in necp_kernel_socket_policy_add()
4327 …if ((new_kernel_policy->condition_mask & NECP_KERNEL_CONDITION_ALL_INTERFACES) && (new_kernel_poli… in necp_kernel_socket_policy_add()
4328 new_kernel_policy->condition_mask &= ~NECP_KERNEL_CONDITION_BOUND_INTERFACE; in necp_kernel_socket_policy_add()
4330 …if ((new_kernel_policy->condition_mask & NECP_KERNEL_CONDITION_REAL_APP_ID) && !(new_kernel_policy… in necp_kernel_socket_policy_add()
4331 new_kernel_policy->condition_mask &= ~NECP_KERNEL_CONDITION_REAL_APP_ID; in necp_kernel_socket_policy_add()
4333 …if ((new_kernel_policy->condition_mask & NECP_KERNEL_CONDITION_LOCAL_END) && (new_kernel_policy->c… in necp_kernel_socket_policy_add()
4334 new_kernel_policy->condition_mask &= ~NECP_KERNEL_CONDITION_LOCAL_PREFIX; in necp_kernel_socket_policy_add()
4336 …if ((new_kernel_policy->condition_mask & NECP_KERNEL_CONDITION_REMOTE_END) && (new_kernel_policy->… in necp_kernel_socket_policy_add()
4337 new_kernel_policy->condition_mask &= ~NECP_KERNEL_CONDITION_REMOTE_PREFIX; in necp_kernel_socket_policy_add()
4339 if (new_kernel_policy->condition_mask & NECP_KERNEL_CONDITION_LOCAL_EMPTY) { in necp_kernel_socket_policy_add()
4340 …new_kernel_policy->condition_mask &= ~(NECP_KERNEL_CONDITION_LOCAL_PREFIX | NECP_KERNEL_CONDITION_… in necp_kernel_socket_policy_add()
4342 if ((new_kernel_policy->condition_mask & NECP_KERNEL_CONDITION_REMOTE_EMPTY)) { in necp_kernel_socket_policy_add()
4343 …new_kernel_policy->condition_mask &= ~(NECP_KERNEL_CONDITION_REMOTE_PREFIX | NECP_KERNEL_CONDITION… in necp_kernel_socket_policy_add()
4345 …kernel_policy->condition_negated_mask = condition_negated_mask & new_kernel_policy->condition_mask; in necp_kernel_socket_policy_add()
4348 if (new_kernel_policy->condition_mask & NECP_KERNEL_CONDITION_APP_ID) { in necp_kernel_socket_policy_add()
4351 if (new_kernel_policy->condition_mask & NECP_KERNEL_CONDITION_REAL_APP_ID) { in necp_kernel_socket_policy_add()
4354 if (new_kernel_policy->condition_mask & NECP_KERNEL_CONDITION_CUSTOM_ENTITLEMENT) { in necp_kernel_socket_policy_add()
4357 if (new_kernel_policy->condition_mask & NECP_KERNEL_CONDITION_ACCOUNT_ID) { in necp_kernel_socket_policy_add()
4360 if ((new_kernel_policy->condition_mask & NECP_KERNEL_CONDITION_DOMAIN) || in necp_kernel_socket_policy_add()
4361 (new_kernel_policy->condition_mask & NECP_KERNEL_CONDITION_EXACT_DOMAIN)) { in necp_kernel_socket_policy_add()
4365 if (new_kernel_policy->condition_mask & NECP_KERNEL_CONDITION_DOMAIN_FILTER) { in necp_kernel_socket_policy_add()
4368 if (new_kernel_policy->condition_mask & NECP_KERNEL_CONDITION_PID) { in necp_kernel_socket_policy_add()
4372 if (new_kernel_policy->condition_mask & NECP_KERNEL_CONDITION_UID) { in necp_kernel_socket_policy_add()
4375 if (new_kernel_policy->condition_mask & NECP_KERNEL_CONDITION_BOUND_INTERFACE) { in necp_kernel_socket_policy_add()
4381 if (new_kernel_policy->condition_mask & NECP_KERNEL_CONDITION_TRAFFIC_CLASS) { in necp_kernel_socket_policy_add()
4384 if (new_kernel_policy->condition_mask & NECP_KERNEL_CONDITION_PROTOCOL) { in necp_kernel_socket_policy_add()
4387 if (new_kernel_policy->condition_mask & NECP_KERNEL_CONDITION_LOCAL_START) { in necp_kernel_socket_policy_add()
4390 if (new_kernel_policy->condition_mask & NECP_KERNEL_CONDITION_LOCAL_END) { in necp_kernel_socket_policy_add()
4393 if (new_kernel_policy->condition_mask & NECP_KERNEL_CONDITION_LOCAL_PREFIX) { in necp_kernel_socket_policy_add()
4396 if (new_kernel_policy->condition_mask & NECP_KERNEL_CONDITION_REMOTE_START) { in necp_kernel_socket_policy_add()
4399 if (new_kernel_policy->condition_mask & NECP_KERNEL_CONDITION_REMOTE_END) { in necp_kernel_socket_policy_add()
4402 if (new_kernel_policy->condition_mask & NECP_KERNEL_CONDITION_REMOTE_PREFIX) { in necp_kernel_socket_policy_add()
4405 if (new_kernel_policy->condition_mask & NECP_KERNEL_CONDITION_AGENT_TYPE) { in necp_kernel_socket_policy_add()
4408 if (new_kernel_policy->condition_mask & NECP_KERNEL_CONDITION_SDK_VERSION) { in necp_kernel_socket_policy_add()
4411 if (new_kernel_policy->condition_mask & NECP_KERNEL_CONDITION_CLIENT_FLAGS) { in necp_kernel_socket_policy_add()
4414 if (new_kernel_policy->condition_mask & NECP_KERNEL_CONDITION_SIGNING_IDENTIFIER) { in necp_kernel_socket_policy_add()
4417 if (new_kernel_policy->condition_mask & NECP_KERNEL_CONDITION_PACKET_FILTER_TAGS) { in necp_kernel_socket_policy_add()
4420 if (new_kernel_policy->condition_mask & NECP_KERNEL_CONDITION_SCHEME_PORT) { in necp_kernel_socket_policy_add()
4428 …nel policy: socket, id=%d, mask=%llx\n", new_kernel_policy->id, new_kernel_policy->condition_mask); in necp_kernel_socket_policy_add()
4701 …>id, proc_name_string, policy->session_order, policy->order, policy->condition_mask, necp_get_resu… in necp_kernel_socket_policies_dump_all()
4714 …>id, proc_name_string, policy->session_order, policy->order, policy->condition_mask, necp_get_resu… in necp_kernel_socket_policies_dump_all()
4797 …if ((policy->condition_mask & NECP_KERNEL_CONDITION_ALL_INTERFACES) && !(compared_policy->conditio… in necp_kernel_socket_policy_is_unnecessary()
4802 …if ((policy->condition_mask & NECP_KERNEL_CONDITION_LOCAL_NETWORKS) && !(compared_policy->conditio… in necp_kernel_socket_policy_is_unnecessary()
4807 if (compared_policy->condition_mask == 0) { in necp_kernel_socket_policy_is_unnecessary()
4812 …if ((policy->condition_mask & compared_policy->condition_mask) != compared_policy->condition_mask)… in necp_kernel_socket_policy_is_unnecessary()
4817 …gated_mask & compared_policy->condition_mask) != (compared_policy->condition_negated_mask & compar… in necp_kernel_socket_policy_is_unnecessary()
4821 if ((compared_policy->condition_mask & NECP_KERNEL_CONDITION_DOMAIN || in necp_kernel_socket_policy_is_unnecessary()
4822 compared_policy->condition_mask & NECP_KERNEL_CONDITION_EXACT_DOMAIN) && in necp_kernel_socket_policy_is_unnecessary()
4827 if (compared_policy->condition_mask & NECP_KERNEL_CONDITION_DOMAIN_FILTER && in necp_kernel_socket_policy_is_unnecessary()
4832 if (compared_policy->condition_mask & NECP_KERNEL_CONDITION_CUSTOM_ENTITLEMENT && in necp_kernel_socket_policy_is_unnecessary()
4837 if (compared_policy->condition_mask & NECP_KERNEL_CONDITION_ACCOUNT_ID && in necp_kernel_socket_policy_is_unnecessary()
4842 if (compared_policy->condition_mask & NECP_KERNEL_CONDITION_POLICY_ID && in necp_kernel_socket_policy_is_unnecessary()
4847 if (compared_policy->condition_mask & NECP_KERNEL_CONDITION_APP_ID && in necp_kernel_socket_policy_is_unnecessary()
4852 if (compared_policy->condition_mask & NECP_KERNEL_CONDITION_REAL_APP_ID && in necp_kernel_socket_policy_is_unnecessary()
4857 if (compared_policy->condition_mask & NECP_KERNEL_CONDITION_PID && in necp_kernel_socket_policy_is_unnecessary()
4862 if (compared_policy->condition_mask & NECP_KERNEL_CONDITION_UID && in necp_kernel_socket_policy_is_unnecessary()
4867 if (compared_policy->condition_mask & NECP_KERNEL_CONDITION_BOUND_INTERFACE && in necp_kernel_socket_policy_is_unnecessary()
4872 if (compared_policy->condition_mask & NECP_KERNEL_CONDITION_PROTOCOL && in necp_kernel_socket_policy_is_unnecessary()
4877 if (compared_policy->condition_mask & NECP_KERNEL_CONDITION_CLIENT_FLAGS && in necp_kernel_socket_policy_is_unnecessary()
4882 if (compared_policy->condition_mask & NECP_KERNEL_CONDITION_TRAFFIC_CLASS && in necp_kernel_socket_policy_is_unnecessary()
4888 if (compared_policy->condition_mask & NECP_KERNEL_CONDITION_LOCAL_START) { in necp_kernel_socket_policy_is_unnecessary()
4889 if (compared_policy->condition_mask & NECP_KERNEL_CONDITION_LOCAL_END) { in necp_kernel_socket_policy_is_unnecessary()
4893 } else if (compared_policy->condition_mask & NECP_KERNEL_CONDITION_LOCAL_PREFIX) { in necp_kernel_socket_policy_is_unnecessary()
4901 if (compared_policy->condition_mask & NECP_KERNEL_CONDITION_REMOTE_START) { in necp_kernel_socket_policy_is_unnecessary()
4902 if (compared_policy->condition_mask & NECP_KERNEL_CONDITION_REMOTE_END) { in necp_kernel_socket_policy_is_unnecessary()
4906 } else if (compared_policy->condition_mask & NECP_KERNEL_CONDITION_REMOTE_PREFIX) { in necp_kernel_socket_policy_is_unnecessary()
4914 if (compared_policy->condition_mask & NECP_KERNEL_CONDITION_AGENT_TYPE && in necp_kernel_socket_policy_is_unnecessary()
4919 if (compared_policy->condition_mask & NECP_KERNEL_CONDITION_SDK_VERSION && in necp_kernel_socket_policy_is_unnecessary()
4924 if (compared_policy->condition_mask & NECP_KERNEL_CONDITION_PACKET_FILTER_TAGS && in necp_kernel_socket_policy_is_unnecessary()
4929 if (compared_policy->condition_mask & NECP_KERNEL_CONDITION_SCHEME_PORT && in necp_kernel_socket_policy_is_unnecessary()
4980 necp_kernel_application_policies_condition_mask |= kernel_policy->condition_mask; in necp_kernel_socket_policies_reprocess()
4984 if ((kernel_policy->condition_mask & NECP_KERNEL_CONDITION_AGENT_TYPE)) { in necp_kernel_socket_policies_reprocess()
4990 necp_kernel_socket_policies_condition_mask |= kernel_policy->condition_mask; in necp_kernel_socket_policies_reprocess()
4993 if (!(kernel_policy->condition_mask & NECP_KERNEL_CONDITION_APP_ID) || in necp_kernel_socket_policies_reprocess()
5031 if ((kernel_policy->condition_mask & NECP_KERNEL_CONDITION_AGENT_TYPE)) { in necp_kernel_socket_policies_reprocess()
5037 if (!(kernel_policy->condition_mask & NECP_KERNEL_CONDITION_APP_ID) || in necp_kernel_socket_policies_reprocess()
6032 …_order suborder, u_int32_t session_order, int session_pid, u_int64_t condition_mask, u_int64_t con… in necp_kernel_ip_output_policy_add() argument
6045 new_kernel_policy->condition_mask = (condition_mask & NECP_KERNEL_VALID_IP_OUTPUT_CONDITIONS); in necp_kernel_ip_output_policy_add()
6046 …if ((new_kernel_policy->condition_mask & NECP_KERNEL_CONDITION_ALL_INTERFACES) && (new_kernel_poli… in necp_kernel_ip_output_policy_add()
6047 new_kernel_policy->condition_mask &= ~NECP_KERNEL_CONDITION_BOUND_INTERFACE; in necp_kernel_ip_output_policy_add()
6049 …if ((new_kernel_policy->condition_mask & NECP_KERNEL_CONDITION_LOCAL_END) && (new_kernel_policy->c… in necp_kernel_ip_output_policy_add()
6050 new_kernel_policy->condition_mask &= ~NECP_KERNEL_CONDITION_LOCAL_PREFIX; in necp_kernel_ip_output_policy_add()
6052 …if ((new_kernel_policy->condition_mask & NECP_KERNEL_CONDITION_REMOTE_END) && (new_kernel_policy->… in necp_kernel_ip_output_policy_add()
6053 new_kernel_policy->condition_mask &= ~NECP_KERNEL_CONDITION_REMOTE_PREFIX; in necp_kernel_ip_output_policy_add()
6055 …kernel_policy->condition_negated_mask = condition_negated_mask & new_kernel_policy->condition_mask; in necp_kernel_ip_output_policy_add()
6058 if (new_kernel_policy->condition_mask & NECP_KERNEL_CONDITION_POLICY_ID) { in necp_kernel_ip_output_policy_add()
6061 if (new_kernel_policy->condition_mask & NECP_KERNEL_CONDITION_BOUND_INTERFACE) { in necp_kernel_ip_output_policy_add()
6067 if (new_kernel_policy->condition_mask & NECP_KERNEL_CONDITION_LAST_INTERFACE) { in necp_kernel_ip_output_policy_add()
6070 if (new_kernel_policy->condition_mask & NECP_KERNEL_CONDITION_PROTOCOL) { in necp_kernel_ip_output_policy_add()
6073 if (new_kernel_policy->condition_mask & NECP_KERNEL_CONDITION_LOCAL_START) { in necp_kernel_ip_output_policy_add()
6076 if (new_kernel_policy->condition_mask & NECP_KERNEL_CONDITION_LOCAL_END) { in necp_kernel_ip_output_policy_add()
6079 if (new_kernel_policy->condition_mask & NECP_KERNEL_CONDITION_LOCAL_PREFIX) { in necp_kernel_ip_output_policy_add()
6082 if (new_kernel_policy->condition_mask & NECP_KERNEL_CONDITION_REMOTE_START) { in necp_kernel_ip_output_policy_add()
6085 if (new_kernel_policy->condition_mask & NECP_KERNEL_CONDITION_REMOTE_END) { in necp_kernel_ip_output_policy_add()
6088 if (new_kernel_policy->condition_mask & NECP_KERNEL_CONDITION_REMOTE_PREFIX) { in necp_kernel_ip_output_policy_add()
6091 if (new_kernel_policy->condition_mask & NECP_KERNEL_CONDITION_PACKET_FILTER_TAGS) { in necp_kernel_ip_output_policy_add()
6094 if (new_kernel_policy->condition_mask & NECP_KERNEL_CONDITION_SCHEME_PORT) { in necp_kernel_ip_output_policy_add()
6102 … policy: ip output, id=%d, mask=%llx\n", new_kernel_policy->id, new_kernel_policy->condition_mask); in necp_kernel_ip_output_policy_add()
6170 …ing, policy->session_order, policy->order, policy->suborder, policy->condition_mask, necp_get_resu… in necp_kernel_ip_output_policies_dump_all()
6242 …if ((policy->condition_mask & NECP_KERNEL_CONDITION_ALL_INTERFACES) && !(compared_policy->conditio… in necp_kernel_ip_output_policy_is_unnecessary()
6247 …if ((policy->condition_mask & NECP_KERNEL_CONDITION_LOCAL_NETWORKS) && !(compared_policy->conditio… in necp_kernel_ip_output_policy_is_unnecessary()
6252 if (compared_policy->condition_mask == 0) { in necp_kernel_ip_output_policy_is_unnecessary()
6257 …if ((policy->condition_mask & compared_policy->condition_mask) != compared_policy->condition_mask)… in necp_kernel_ip_output_policy_is_unnecessary()
6262 …gated_mask & compared_policy->condition_mask) != (compared_policy->condition_negated_mask & compar… in necp_kernel_ip_output_policy_is_unnecessary()
6266 if (compared_policy->condition_mask & NECP_KERNEL_CONDITION_POLICY_ID && in necp_kernel_ip_output_policy_is_unnecessary()
6271 if (compared_policy->condition_mask & NECP_KERNEL_CONDITION_BOUND_INTERFACE && in necp_kernel_ip_output_policy_is_unnecessary()
6276 if (compared_policy->condition_mask & NECP_KERNEL_CONDITION_PROTOCOL && in necp_kernel_ip_output_policy_is_unnecessary()
6281 if (compared_policy->condition_mask & NECP_KERNEL_CONDITION_LOCAL_START) { in necp_kernel_ip_output_policy_is_unnecessary()
6282 if (compared_policy->condition_mask & NECP_KERNEL_CONDITION_LOCAL_END) { in necp_kernel_ip_output_policy_is_unnecessary()
6286 } else if (compared_policy->condition_mask & NECP_KERNEL_CONDITION_LOCAL_PREFIX) { in necp_kernel_ip_output_policy_is_unnecessary()
6294 if (compared_policy->condition_mask & NECP_KERNEL_CONDITION_REMOTE_START) { in necp_kernel_ip_output_policy_is_unnecessary()
6295 if (compared_policy->condition_mask & NECP_KERNEL_CONDITION_REMOTE_END) { in necp_kernel_ip_output_policy_is_unnecessary()
6299 } else if (compared_policy->condition_mask & NECP_KERNEL_CONDITION_REMOTE_PREFIX) { in necp_kernel_ip_output_policy_is_unnecessary()
6307 if (compared_policy->condition_mask & NECP_KERNEL_CONDITION_SCHEME_PORT && in necp_kernel_ip_output_policy_is_unnecessary()
6346 necp_kernel_ip_output_policies_condition_mask |= kernel_policy->condition_mask; in necp_kernel_ip_output_policies_reprocess()
6353 if (!(kernel_policy->condition_mask & NECP_KERNEL_CONDITION_POLICY_ID) || in necp_kernel_ip_output_policies_reprocess()
6354 (kernel_policy->condition_mask & NECP_KERNEL_CONDITION_LOCAL_NETWORKS) || in necp_kernel_ip_output_policies_reprocess()
6360 if (!(kernel_policy->condition_mask & NECP_KERNEL_CONDITION_POLICY_ID)) { in necp_kernel_ip_output_policies_reprocess()
6381 if (!(kernel_policy->condition_mask & NECP_KERNEL_CONDITION_POLICY_ID) || in necp_kernel_ip_output_policies_reprocess()
6382 (kernel_policy->condition_mask & NECP_KERNEL_CONDITION_LOCAL_NETWORKS) || in necp_kernel_ip_output_policies_reprocess()
7291 …ride_euuid != NULL && info.used_responsible_pid && !(matched_policy->condition_mask & NECP_KERNEL_… in necp_application_find_policy_match_internal()
7902 if (!(kernel_policy->condition_mask & NECP_KERNEL_CONDITION_ALL_INTERFACES)) { in necp_socket_check_policy()
7903 if (kernel_policy->condition_mask & NECP_KERNEL_CONDITION_BOUND_INTERFACE) { in necp_socket_check_policy()
7927 if (kernel_policy->condition_mask == 0) { in necp_socket_check_policy()
7931 if (kernel_policy->condition_mask & NECP_KERNEL_CONDITION_APP_ID) { in necp_socket_check_policy()
7948 kernel_policy->condition_mask & NECP_KERNEL_CONDITION_SIGNING_IDENTIFIER) { in necp_socket_check_policy()
7974 if (kernel_policy->condition_mask & NECP_KERNEL_CONDITION_REAL_APP_ID) { in necp_socket_check_policy()
7991 if (kernel_policy->condition_mask & NECP_KERNEL_CONDITION_HAS_CLIENT) { in necp_socket_check_policy()
7998 if (kernel_policy->condition_mask & NECP_KERNEL_CONDITION_ENTITLEMENT) { in necp_socket_check_policy()
8006 if (kernel_policy->condition_mask & NECP_KERNEL_CONDITION_PLATFORM_BINARY) { in necp_socket_check_policy()
8014 if (kernel_policy->condition_mask & NECP_KERNEL_CONDITION_SYSTEM_SIGNED_RESULT) { in necp_socket_check_policy()
8022 if (kernel_policy->condition_mask & NECP_KERNEL_CONDITION_SDK_VERSION) { in necp_socket_check_policy()
8054 if (kernel_policy->condition_mask & NECP_KERNEL_CONDITION_CUSTOM_ENTITLEMENT) { in necp_socket_check_policy()
8070 if (kernel_policy->condition_mask & NECP_KERNEL_CONDITION_EXACT_DOMAIN) { in necp_socket_check_policy()
8087 } else if (kernel_policy->condition_mask & NECP_KERNEL_CONDITION_DOMAIN) { in necp_socket_check_policy()
8104 if (kernel_policy->condition_mask & NECP_KERNEL_CONDITION_DOMAIN_FILTER) { in necp_socket_check_policy()
8122 if (kernel_policy->condition_mask & NECP_KERNEL_CONDITION_ACCOUNT_ID) { in necp_socket_check_policy()
8139 if (kernel_policy->condition_mask & NECP_KERNEL_CONDITION_PID) { in necp_socket_check_policy()
8162 if (kernel_policy->condition_mask & NECP_KERNEL_CONDITION_UID) { in necp_socket_check_policy()
8179 if (kernel_policy->condition_mask & NECP_KERNEL_CONDITION_TRAFFIC_CLASS) { in necp_socket_check_policy()
8198 if (kernel_policy->condition_mask & NECP_KERNEL_CONDITION_PROTOCOL) { in necp_socket_check_policy()
8215 if (kernel_policy->condition_mask & NECP_KERNEL_CONDITION_AGENT_TYPE) { in necp_socket_check_policy()
8236 if (kernel_policy->condition_mask & NECP_KERNEL_CONDITION_LOCAL_NETWORKS) { in necp_socket_check_policy()
8251 if (kernel_policy->condition_mask & NECP_KERNEL_CONDITION_LOCAL_START) { in necp_socket_check_policy()
8252 if (kernel_policy->condition_mask & NECP_KERNEL_CONDITION_LOCAL_END) { in necp_socket_check_policy()
8264 } else if (kernel_policy->condition_mask & NECP_KERNEL_CONDITION_LOCAL_PREFIX) { in necp_socket_check_policy()
8279 if (kernel_policy->condition_mask & NECP_KERNEL_CONDITION_REMOTE_START) { in necp_socket_check_policy()
8280 if (kernel_policy->condition_mask & NECP_KERNEL_CONDITION_REMOTE_END) { in necp_socket_check_policy()
8292 } else if (kernel_policy->condition_mask & NECP_KERNEL_CONDITION_REMOTE_PREFIX) { in necp_socket_check_policy()
8307 if (kernel_policy->condition_mask & NECP_KERNEL_CONDITION_CLIENT_FLAGS) { in necp_socket_check_policy()
8324 if (kernel_policy->condition_mask & NECP_KERNEL_CONDITION_LOCAL_EMPTY) { in necp_socket_check_policy()
8340 if (kernel_policy->condition_mask & NECP_KERNEL_CONDITION_REMOTE_EMPTY) { in necp_socket_check_policy()
8356 if (kernel_policy->condition_mask & NECP_KERNEL_CONDITION_SCHEME_PORT) { in necp_socket_check_policy()
8377 if (kernel_policy->condition_mask & NECP_KERNEL_CONDITION_PACKET_FILTER_TAGS) { in necp_socket_check_policy()
8400 if (kernel_policy->condition_mask & NECP_KERNEL_CONDITION_IS_LOOPBACK) { in necp_socket_check_policy()
8412 …if (is_delegated && (kernel_policy->condition_mask & NECP_KERNEL_CONDITION_DELEGATE_IS_PLATFORM_BI… in necp_socket_check_policy()
9223 …if (info.used_responsible_pid && (matched_policy->condition_mask & NECP_KERNEL_CONDITION_REAL_APP_… in necp_socket_find_policy_match()
9336 if (!(kernel_policy->condition_mask & NECP_KERNEL_CONDITION_ALL_INTERFACES)) { in necp_ip_output_check_policy()
9337 if (kernel_policy->condition_mask & NECP_KERNEL_CONDITION_BOUND_INTERFACE) { in necp_ip_output_check_policy()
9362 if (kernel_policy->condition_mask == 0) { in necp_ip_output_check_policy()
9366 if (kernel_policy->condition_mask & NECP_KERNEL_CONDITION_POLICY_ID) { in necp_ip_output_check_policy()
9379 if (kernel_policy->condition_mask & NECP_KERNEL_CONDITION_LAST_INTERFACE) { in necp_ip_output_check_policy()
9388 if (kernel_policy->condition_mask & NECP_KERNEL_CONDITION_PROTOCOL) { in necp_ip_output_check_policy()
9405 if (kernel_policy->condition_mask & NECP_KERNEL_CONDITION_LOCAL_NETWORKS) { in necp_ip_output_check_policy()
9420 if (kernel_policy->condition_mask & NECP_KERNEL_CONDITION_LOCAL_START) { in necp_ip_output_check_policy()
9421 if (kernel_policy->condition_mask & NECP_KERNEL_CONDITION_LOCAL_END) { in necp_ip_output_check_policy()
9433 } else if (kernel_policy->condition_mask & NECP_KERNEL_CONDITION_LOCAL_PREFIX) { in necp_ip_output_check_policy()
9448 if (kernel_policy->condition_mask & NECP_KERNEL_CONDITION_REMOTE_START) { in necp_ip_output_check_policy()
9449 if (kernel_policy->condition_mask & NECP_KERNEL_CONDITION_REMOTE_END) { in necp_ip_output_check_policy()
9461 } else if (kernel_policy->condition_mask & NECP_KERNEL_CONDITION_REMOTE_PREFIX) { in necp_ip_output_check_policy()
9476 if (kernel_policy->condition_mask & NECP_KERNEL_CONDITION_SCHEME_PORT) { in necp_ip_output_check_policy()
9495 if (kernel_policy->condition_mask & NECP_KERNEL_CONDITION_PACKET_FILTER_TAGS) { in necp_ip_output_check_policy()