Lines Matching refs:compared_policy
4770 struct necp_kernel_socket_policy *compared_policy = policy_array[i]; in necp_kernel_socket_policy_is_unnecessary() local
4774 if (highest_skip_session_order != compared_policy->session_order || in necp_kernel_socket_policy_is_unnecessary()
4775 (highest_skip_order != 0 && compared_policy->order >= highest_skip_order)) { in necp_kernel_socket_policy_is_unnecessary()
4782 if (compared_policy->result == NECP_KERNEL_POLICY_RESULT_SKIP) { in necp_kernel_socket_policy_is_unnecessary()
4783 if (compared_policy->result_parameter.skip_policy_order > highest_skip_order) { in necp_kernel_socket_policy_is_unnecessary()
4784 highest_skip_order = compared_policy->result_parameter.skip_policy_order; in necp_kernel_socket_policy_is_unnecessary()
4791 if (compared_policy->result == NECP_KERNEL_POLICY_RESULT_SKIP) { in necp_kernel_socket_policy_is_unnecessary()
4794 highest_skip_session_order = compared_policy->session_order; in necp_kernel_socket_policy_is_unnecessary()
4795 highest_skip_order = compared_policy->result_parameter.skip_policy_order; in necp_kernel_socket_policy_is_unnecessary()
4799 if (!necp_kernel_socket_policy_results_overlap(compared_policy, policy)) { in necp_kernel_socket_policy_is_unnecessary()
4804 …if ((policy->condition_mask & NECP_KERNEL_CONDITION_ALL_INTERFACES) && !(compared_policy->conditio… in necp_kernel_socket_policy_is_unnecessary()
4809 …if ((policy->condition_mask & NECP_KERNEL_CONDITION_LOCAL_NETWORKS) && !(compared_policy->conditio… in necp_kernel_socket_policy_is_unnecessary()
4814 if (compared_policy->condition_mask == 0) { in necp_kernel_socket_policy_is_unnecessary()
4819 …if ((policy->condition_mask & compared_policy->condition_mask) != compared_policy->condition_mask)… in necp_kernel_socket_policy_is_unnecessary()
4824 …cy->condition_negated_mask & compared_policy->condition_mask) != (compared_policy->condition_negat… in necp_kernel_socket_policy_is_unnecessary()
4828 if ((compared_policy->condition_mask & NECP_KERNEL_CONDITION_DOMAIN || in necp_kernel_socket_policy_is_unnecessary()
4829 compared_policy->condition_mask & NECP_KERNEL_CONDITION_EXACT_DOMAIN) && in necp_kernel_socket_policy_is_unnecessary()
4830 strcmp(compared_policy->cond_domain, policy->cond_domain) != 0) { in necp_kernel_socket_policy_is_unnecessary()
4834 if (compared_policy->condition_mask & NECP_KERNEL_CONDITION_DOMAIN_FILTER && in necp_kernel_socket_policy_is_unnecessary()
4835 compared_policy->cond_domain_filter != policy->cond_domain_filter) { in necp_kernel_socket_policy_is_unnecessary()
4839 if (compared_policy->condition_mask & NECP_KERNEL_CONDITION_CUSTOM_ENTITLEMENT && in necp_kernel_socket_policy_is_unnecessary()
4840 strcmp(compared_policy->cond_custom_entitlement, policy->cond_custom_entitlement) != 0) { in necp_kernel_socket_policy_is_unnecessary()
4844 if (compared_policy->condition_mask & NECP_KERNEL_CONDITION_ACCOUNT_ID && in necp_kernel_socket_policy_is_unnecessary()
4845 compared_policy->cond_account_id != policy->cond_account_id) { in necp_kernel_socket_policy_is_unnecessary()
4849 if (compared_policy->condition_mask & NECP_KERNEL_CONDITION_POLICY_ID && in necp_kernel_socket_policy_is_unnecessary()
4850 compared_policy->cond_policy_id != policy->cond_policy_id) { in necp_kernel_socket_policy_is_unnecessary()
4854 if (compared_policy->condition_mask & NECP_KERNEL_CONDITION_APP_ID && in necp_kernel_socket_policy_is_unnecessary()
4855 compared_policy->cond_app_id != policy->cond_app_id) { in necp_kernel_socket_policy_is_unnecessary()
4859 if (compared_policy->condition_mask & NECP_KERNEL_CONDITION_REAL_APP_ID && in necp_kernel_socket_policy_is_unnecessary()
4860 compared_policy->cond_real_app_id != policy->cond_real_app_id) { in necp_kernel_socket_policy_is_unnecessary()
4864 if (compared_policy->condition_mask & NECP_KERNEL_CONDITION_PID && in necp_kernel_socket_policy_is_unnecessary()
4865 …(compared_policy->cond_pid != policy->cond_pid || compared_policy->cond_pid_version != policy->con… in necp_kernel_socket_policy_is_unnecessary()
4869 if (compared_policy->condition_mask & NECP_KERNEL_CONDITION_UID && in necp_kernel_socket_policy_is_unnecessary()
4870 compared_policy->cond_uid != policy->cond_uid) { in necp_kernel_socket_policy_is_unnecessary()
4874 if (compared_policy->condition_mask & NECP_KERNEL_CONDITION_BOUND_INTERFACE && in necp_kernel_socket_policy_is_unnecessary()
4875 compared_policy->cond_bound_interface != policy->cond_bound_interface) { in necp_kernel_socket_policy_is_unnecessary()
4879 if (compared_policy->condition_mask & NECP_KERNEL_CONDITION_PROTOCOL && in necp_kernel_socket_policy_is_unnecessary()
4880 compared_policy->cond_protocol != policy->cond_protocol) { in necp_kernel_socket_policy_is_unnecessary()
4884 if (compared_policy->condition_mask & NECP_KERNEL_CONDITION_CLIENT_FLAGS && in necp_kernel_socket_policy_is_unnecessary()
4885 compared_policy->cond_client_flags != policy->cond_client_flags) { in necp_kernel_socket_policy_is_unnecessary()
4889 if (compared_policy->condition_mask & NECP_KERNEL_CONDITION_TRAFFIC_CLASS && in necp_kernel_socket_policy_is_unnecessary()
4890 !(compared_policy->cond_traffic_class.start_tc <= policy->cond_traffic_class.start_tc && in necp_kernel_socket_policy_is_unnecessary()
4891 compared_policy->cond_traffic_class.end_tc >= policy->cond_traffic_class.end_tc)) { in necp_kernel_socket_policy_is_unnecessary()
4895 if (compared_policy->condition_mask & NECP_KERNEL_CONDITION_LOCAL_START) { in necp_kernel_socket_policy_is_unnecessary()
4896 if (compared_policy->condition_mask & NECP_KERNEL_CONDITION_LOCAL_END) { in necp_kernel_socket_policy_is_unnecessary()
4897 …icy->cond_local_end, (struct sockaddr *)&compared_policy->cond_local_start, (struct sockaddr *)&co… in necp_kernel_socket_policy_is_unnecessary()
4900 } else if (compared_policy->condition_mask & NECP_KERNEL_CONDITION_LOCAL_PREFIX) { in necp_kernel_socket_policy_is_unnecessary()
4901 if (compared_policy->cond_local_prefix > policy->cond_local_prefix || in necp_kernel_socket_policy_is_unnecessary()
4902 …r *)&policy->cond_local_start, (struct sockaddr *)&compared_policy->cond_local_start, compared_pol… in necp_kernel_socket_policy_is_unnecessary()
4908 if (compared_policy->condition_mask & NECP_KERNEL_CONDITION_REMOTE_START) { in necp_kernel_socket_policy_is_unnecessary()
4909 if (compared_policy->condition_mask & NECP_KERNEL_CONDITION_REMOTE_END) { in necp_kernel_socket_policy_is_unnecessary()
4910 …cy->cond_remote_end, (struct sockaddr *)&compared_policy->cond_remote_start, (struct sockaddr *)&c… in necp_kernel_socket_policy_is_unnecessary()
4913 } else if (compared_policy->condition_mask & NECP_KERNEL_CONDITION_REMOTE_PREFIX) { in necp_kernel_socket_policy_is_unnecessary()
4914 if (compared_policy->cond_remote_prefix > policy->cond_remote_prefix || in necp_kernel_socket_policy_is_unnecessary()
4915 … *)&policy->cond_remote_start, (struct sockaddr *)&compared_policy->cond_remote_start, compared_po… in necp_kernel_socket_policy_is_unnecessary()
4921 if (compared_policy->condition_mask & NECP_KERNEL_CONDITION_AGENT_TYPE && in necp_kernel_socket_policy_is_unnecessary()
4922 …memcmp(&compared_policy->cond_agent_type, &policy->cond_agent_type, sizeof(policy->cond_agent_type… in necp_kernel_socket_policy_is_unnecessary()
4926 if (compared_policy->condition_mask & NECP_KERNEL_CONDITION_SDK_VERSION && in necp_kernel_socket_policy_is_unnecessary()
4927 …memcmp(&compared_policy->cond_sdk_version, &policy->cond_sdk_version, sizeof(policy->cond_sdk_vers… in necp_kernel_socket_policy_is_unnecessary()
4931 if (compared_policy->condition_mask & NECP_KERNEL_CONDITION_PACKET_FILTER_TAGS && in necp_kernel_socket_policy_is_unnecessary()
4932 …memcmp(&compared_policy->cond_packet_filter_tags, &policy->cond_packet_filter_tags, sizeof(policy-… in necp_kernel_socket_policy_is_unnecessary()
4936 if (compared_policy->condition_mask & NECP_KERNEL_CONDITION_SCHEME_PORT && in necp_kernel_socket_policy_is_unnecessary()
4937 …memcmp(&compared_policy->cond_scheme_port, &policy->cond_scheme_port, sizeof(policy->cond_scheme_p… in necp_kernel_socket_policy_is_unnecessary()
6221 struct necp_kernel_ip_output_policy *compared_policy = policy_array[i]; in necp_kernel_ip_output_policy_is_unnecessary() local
6225 if (highest_skip_session_order != compared_policy->session_order || in necp_kernel_ip_output_policy_is_unnecessary()
6226 (highest_skip_order != 0 && compared_policy->order >= highest_skip_order)) { in necp_kernel_ip_output_policy_is_unnecessary()
6233 if (compared_policy->result == NECP_KERNEL_POLICY_RESULT_SKIP) { in necp_kernel_ip_output_policy_is_unnecessary()
6234 if (compared_policy->result_parameter.skip_policy_order > highest_skip_order) { in necp_kernel_ip_output_policy_is_unnecessary()
6235 highest_skip_order = compared_policy->result_parameter.skip_policy_order; in necp_kernel_ip_output_policy_is_unnecessary()
6242 if (compared_policy->result == NECP_KERNEL_POLICY_RESULT_SKIP) { in necp_kernel_ip_output_policy_is_unnecessary()
6245 highest_skip_session_order = compared_policy->session_order; in necp_kernel_ip_output_policy_is_unnecessary()
6246 highest_skip_order = compared_policy->result_parameter.skip_policy_order; in necp_kernel_ip_output_policy_is_unnecessary()
6250 if (!necp_kernel_ip_output_policy_results_overlap(compared_policy, policy)) { in necp_kernel_ip_output_policy_is_unnecessary()
6255 …if ((policy->condition_mask & NECP_KERNEL_CONDITION_ALL_INTERFACES) && !(compared_policy->conditio… in necp_kernel_ip_output_policy_is_unnecessary()
6260 …if ((policy->condition_mask & NECP_KERNEL_CONDITION_LOCAL_NETWORKS) && !(compared_policy->conditio… in necp_kernel_ip_output_policy_is_unnecessary()
6265 if (compared_policy->condition_mask == 0) { in necp_kernel_ip_output_policy_is_unnecessary()
6270 …if ((policy->condition_mask & compared_policy->condition_mask) != compared_policy->condition_mask)… in necp_kernel_ip_output_policy_is_unnecessary()
6275 …cy->condition_negated_mask & compared_policy->condition_mask) != (compared_policy->condition_negat… in necp_kernel_ip_output_policy_is_unnecessary()
6279 if (compared_policy->condition_mask & NECP_KERNEL_CONDITION_POLICY_ID && in necp_kernel_ip_output_policy_is_unnecessary()
6280 compared_policy->cond_policy_id != policy->cond_policy_id) { in necp_kernel_ip_output_policy_is_unnecessary()
6284 if (compared_policy->condition_mask & NECP_KERNEL_CONDITION_BOUND_INTERFACE && in necp_kernel_ip_output_policy_is_unnecessary()
6285 compared_policy->cond_bound_interface != policy->cond_bound_interface) { in necp_kernel_ip_output_policy_is_unnecessary()
6289 if (compared_policy->condition_mask & NECP_KERNEL_CONDITION_PROTOCOL && in necp_kernel_ip_output_policy_is_unnecessary()
6290 compared_policy->cond_protocol != policy->cond_protocol) { in necp_kernel_ip_output_policy_is_unnecessary()
6294 if (compared_policy->condition_mask & NECP_KERNEL_CONDITION_LOCAL_START) { in necp_kernel_ip_output_policy_is_unnecessary()
6295 if (compared_policy->condition_mask & NECP_KERNEL_CONDITION_LOCAL_END) { in necp_kernel_ip_output_policy_is_unnecessary()
6296 …icy->cond_local_end, (struct sockaddr *)&compared_policy->cond_local_start, (struct sockaddr *)&co… in necp_kernel_ip_output_policy_is_unnecessary()
6299 } else if (compared_policy->condition_mask & NECP_KERNEL_CONDITION_LOCAL_PREFIX) { in necp_kernel_ip_output_policy_is_unnecessary()
6300 if (compared_policy->cond_local_prefix > policy->cond_local_prefix || in necp_kernel_ip_output_policy_is_unnecessary()
6301 …r *)&policy->cond_local_start, (struct sockaddr *)&compared_policy->cond_local_start, compared_pol… in necp_kernel_ip_output_policy_is_unnecessary()
6307 if (compared_policy->condition_mask & NECP_KERNEL_CONDITION_REMOTE_START) { in necp_kernel_ip_output_policy_is_unnecessary()
6308 if (compared_policy->condition_mask & NECP_KERNEL_CONDITION_REMOTE_END) { in necp_kernel_ip_output_policy_is_unnecessary()
6309 …cy->cond_remote_end, (struct sockaddr *)&compared_policy->cond_remote_start, (struct sockaddr *)&c… in necp_kernel_ip_output_policy_is_unnecessary()
6312 } else if (compared_policy->condition_mask & NECP_KERNEL_CONDITION_REMOTE_PREFIX) { in necp_kernel_ip_output_policy_is_unnecessary()
6313 if (compared_policy->cond_remote_prefix > policy->cond_remote_prefix || in necp_kernel_ip_output_policy_is_unnecessary()
6314 … *)&policy->cond_remote_start, (struct sockaddr *)&compared_policy->cond_remote_start, compared_po… in necp_kernel_ip_output_policy_is_unnecessary()
6320 if (compared_policy->condition_mask & NECP_KERNEL_CONDITION_SCHEME_PORT && in necp_kernel_ip_output_policy_is_unnecessary()
6321 compared_policy->cond_scheme_port != policy->cond_scheme_port) { in necp_kernel_ip_output_policy_is_unnecessary()