Lines Matching refs:compared_policy
4786 struct necp_kernel_socket_policy *compared_policy = policy_array[i]; in necp_kernel_socket_policy_is_unnecessary() local
4790 if (highest_skip_session_order != compared_policy->session_order || in necp_kernel_socket_policy_is_unnecessary()
4791 (highest_skip_order != 0 && compared_policy->order >= highest_skip_order)) { in necp_kernel_socket_policy_is_unnecessary()
4798 if (compared_policy->result == NECP_KERNEL_POLICY_RESULT_SKIP) { in necp_kernel_socket_policy_is_unnecessary()
4799 if (compared_policy->result_parameter.skip_policy_order > highest_skip_order) { in necp_kernel_socket_policy_is_unnecessary()
4800 highest_skip_order = compared_policy->result_parameter.skip_policy_order; in necp_kernel_socket_policy_is_unnecessary()
4807 if (compared_policy->result == NECP_KERNEL_POLICY_RESULT_SKIP) { in necp_kernel_socket_policy_is_unnecessary()
4810 highest_skip_session_order = compared_policy->session_order; in necp_kernel_socket_policy_is_unnecessary()
4811 highest_skip_order = compared_policy->result_parameter.skip_policy_order; in necp_kernel_socket_policy_is_unnecessary()
4815 if (!necp_kernel_socket_policy_results_overlap(compared_policy, policy)) { in necp_kernel_socket_policy_is_unnecessary()
4820 …if ((policy->condition_mask & NECP_KERNEL_CONDITION_ALL_INTERFACES) && !(compared_policy->conditio… in necp_kernel_socket_policy_is_unnecessary()
4825 …if ((policy->condition_mask & NECP_KERNEL_CONDITION_LOCAL_NETWORKS) && !(compared_policy->conditio… in necp_kernel_socket_policy_is_unnecessary()
4830 if (compared_policy->condition_mask == 0) { in necp_kernel_socket_policy_is_unnecessary()
4835 …if ((policy->condition_mask & compared_policy->condition_mask) != compared_policy->condition_mask)… in necp_kernel_socket_policy_is_unnecessary()
4840 …cy->condition_negated_mask & compared_policy->condition_mask) != (compared_policy->condition_negat… in necp_kernel_socket_policy_is_unnecessary()
4844 if ((compared_policy->condition_mask & NECP_KERNEL_CONDITION_DOMAIN || in necp_kernel_socket_policy_is_unnecessary()
4845 compared_policy->condition_mask & NECP_KERNEL_CONDITION_EXACT_DOMAIN) && in necp_kernel_socket_policy_is_unnecessary()
4846 strcmp(compared_policy->cond_domain, policy->cond_domain) != 0) { in necp_kernel_socket_policy_is_unnecessary()
4850 if (compared_policy->condition_mask & NECP_KERNEL_CONDITION_DOMAIN_FILTER && in necp_kernel_socket_policy_is_unnecessary()
4851 compared_policy->cond_domain_filter != policy->cond_domain_filter) { in necp_kernel_socket_policy_is_unnecessary()
4855 if (compared_policy->condition_mask & NECP_KERNEL_CONDITION_CUSTOM_ENTITLEMENT && in necp_kernel_socket_policy_is_unnecessary()
4856 strcmp(compared_policy->cond_custom_entitlement, policy->cond_custom_entitlement) != 0) { in necp_kernel_socket_policy_is_unnecessary()
4860 if (compared_policy->condition_mask & NECP_KERNEL_CONDITION_ACCOUNT_ID && in necp_kernel_socket_policy_is_unnecessary()
4861 compared_policy->cond_account_id != policy->cond_account_id) { in necp_kernel_socket_policy_is_unnecessary()
4865 if (compared_policy->condition_mask & NECP_KERNEL_CONDITION_POLICY_ID && in necp_kernel_socket_policy_is_unnecessary()
4866 compared_policy->cond_policy_id != policy->cond_policy_id) { in necp_kernel_socket_policy_is_unnecessary()
4870 if (compared_policy->condition_mask & NECP_KERNEL_CONDITION_APP_ID && in necp_kernel_socket_policy_is_unnecessary()
4871 compared_policy->cond_app_id != policy->cond_app_id) { in necp_kernel_socket_policy_is_unnecessary()
4875 if (compared_policy->condition_mask & NECP_KERNEL_CONDITION_REAL_APP_ID && in necp_kernel_socket_policy_is_unnecessary()
4876 compared_policy->cond_real_app_id != policy->cond_real_app_id) { in necp_kernel_socket_policy_is_unnecessary()
4880 if (compared_policy->condition_mask & NECP_KERNEL_CONDITION_PID && in necp_kernel_socket_policy_is_unnecessary()
4881 …(compared_policy->cond_pid != policy->cond_pid || compared_policy->cond_pid_version != policy->con… in necp_kernel_socket_policy_is_unnecessary()
4885 if (compared_policy->condition_mask & NECP_KERNEL_CONDITION_UID && in necp_kernel_socket_policy_is_unnecessary()
4886 compared_policy->cond_uid != policy->cond_uid) { in necp_kernel_socket_policy_is_unnecessary()
4890 if (compared_policy->condition_mask & NECP_KERNEL_CONDITION_BOUND_INTERFACE && in necp_kernel_socket_policy_is_unnecessary()
4891 compared_policy->cond_bound_interface != policy->cond_bound_interface) { in necp_kernel_socket_policy_is_unnecessary()
4895 if (compared_policy->condition_mask & NECP_KERNEL_CONDITION_PROTOCOL && in necp_kernel_socket_policy_is_unnecessary()
4896 compared_policy->cond_protocol != policy->cond_protocol) { in necp_kernel_socket_policy_is_unnecessary()
4900 if (compared_policy->condition_mask & NECP_KERNEL_CONDITION_CLIENT_FLAGS && in necp_kernel_socket_policy_is_unnecessary()
4901 compared_policy->cond_client_flags != policy->cond_client_flags) { in necp_kernel_socket_policy_is_unnecessary()
4905 if (compared_policy->condition_mask & NECP_KERNEL_CONDITION_TRAFFIC_CLASS && in necp_kernel_socket_policy_is_unnecessary()
4906 !(compared_policy->cond_traffic_class.start_tc <= policy->cond_traffic_class.start_tc && in necp_kernel_socket_policy_is_unnecessary()
4907 compared_policy->cond_traffic_class.end_tc >= policy->cond_traffic_class.end_tc)) { in necp_kernel_socket_policy_is_unnecessary()
4911 if (compared_policy->condition_mask & NECP_KERNEL_CONDITION_LOCAL_START) { in necp_kernel_socket_policy_is_unnecessary()
4912 if (compared_policy->condition_mask & NECP_KERNEL_CONDITION_LOCAL_END) { in necp_kernel_socket_policy_is_unnecessary()
4913 …icy->cond_local_end, (struct sockaddr *)&compared_policy->cond_local_start, (struct sockaddr *)&co… in necp_kernel_socket_policy_is_unnecessary()
4916 } else if (compared_policy->condition_mask & NECP_KERNEL_CONDITION_LOCAL_PREFIX) { in necp_kernel_socket_policy_is_unnecessary()
4917 if (compared_policy->cond_local_prefix > policy->cond_local_prefix || in necp_kernel_socket_policy_is_unnecessary()
4918 …r *)&policy->cond_local_start, (struct sockaddr *)&compared_policy->cond_local_start, compared_pol… in necp_kernel_socket_policy_is_unnecessary()
4924 if (compared_policy->condition_mask & NECP_KERNEL_CONDITION_REMOTE_START) { in necp_kernel_socket_policy_is_unnecessary()
4925 if (compared_policy->condition_mask & NECP_KERNEL_CONDITION_REMOTE_END) { in necp_kernel_socket_policy_is_unnecessary()
4926 …cy->cond_remote_end, (struct sockaddr *)&compared_policy->cond_remote_start, (struct sockaddr *)&c… in necp_kernel_socket_policy_is_unnecessary()
4929 } else if (compared_policy->condition_mask & NECP_KERNEL_CONDITION_REMOTE_PREFIX) { in necp_kernel_socket_policy_is_unnecessary()
4930 if (compared_policy->cond_remote_prefix > policy->cond_remote_prefix || in necp_kernel_socket_policy_is_unnecessary()
4931 … *)&policy->cond_remote_start, (struct sockaddr *)&compared_policy->cond_remote_start, compared_po… in necp_kernel_socket_policy_is_unnecessary()
4937 if (compared_policy->condition_mask & NECP_KERNEL_CONDITION_AGENT_TYPE && in necp_kernel_socket_policy_is_unnecessary()
4938 …memcmp(&compared_policy->cond_agent_type, &policy->cond_agent_type, sizeof(policy->cond_agent_type… in necp_kernel_socket_policy_is_unnecessary()
4942 if (compared_policy->condition_mask & NECP_KERNEL_CONDITION_SDK_VERSION && in necp_kernel_socket_policy_is_unnecessary()
4943 …memcmp(&compared_policy->cond_sdk_version, &policy->cond_sdk_version, sizeof(policy->cond_sdk_vers… in necp_kernel_socket_policy_is_unnecessary()
4947 if (compared_policy->condition_mask & NECP_KERNEL_CONDITION_PACKET_FILTER_TAGS && in necp_kernel_socket_policy_is_unnecessary()
4948 …memcmp(&compared_policy->cond_packet_filter_tags, &policy->cond_packet_filter_tags, sizeof(policy-… in necp_kernel_socket_policy_is_unnecessary()
4952 if (compared_policy->condition_mask & NECP_KERNEL_CONDITION_SCHEME_PORT && in necp_kernel_socket_policy_is_unnecessary()
4953 …memcmp(&compared_policy->cond_scheme_port, &policy->cond_scheme_port, sizeof(policy->cond_scheme_p… in necp_kernel_socket_policy_is_unnecessary()
6237 struct necp_kernel_ip_output_policy *compared_policy = policy_array[i]; in necp_kernel_ip_output_policy_is_unnecessary() local
6241 if (highest_skip_session_order != compared_policy->session_order || in necp_kernel_ip_output_policy_is_unnecessary()
6242 (highest_skip_order != 0 && compared_policy->order >= highest_skip_order)) { in necp_kernel_ip_output_policy_is_unnecessary()
6249 if (compared_policy->result == NECP_KERNEL_POLICY_RESULT_SKIP) { in necp_kernel_ip_output_policy_is_unnecessary()
6250 if (compared_policy->result_parameter.skip_policy_order > highest_skip_order) { in necp_kernel_ip_output_policy_is_unnecessary()
6251 highest_skip_order = compared_policy->result_parameter.skip_policy_order; in necp_kernel_ip_output_policy_is_unnecessary()
6258 if (compared_policy->result == NECP_KERNEL_POLICY_RESULT_SKIP) { in necp_kernel_ip_output_policy_is_unnecessary()
6261 highest_skip_session_order = compared_policy->session_order; in necp_kernel_ip_output_policy_is_unnecessary()
6262 highest_skip_order = compared_policy->result_parameter.skip_policy_order; in necp_kernel_ip_output_policy_is_unnecessary()
6266 if (!necp_kernel_ip_output_policy_results_overlap(compared_policy, policy)) { in necp_kernel_ip_output_policy_is_unnecessary()
6271 …if ((policy->condition_mask & NECP_KERNEL_CONDITION_ALL_INTERFACES) && !(compared_policy->conditio… in necp_kernel_ip_output_policy_is_unnecessary()
6276 …if ((policy->condition_mask & NECP_KERNEL_CONDITION_LOCAL_NETWORKS) && !(compared_policy->conditio… in necp_kernel_ip_output_policy_is_unnecessary()
6281 if (compared_policy->condition_mask == 0) { in necp_kernel_ip_output_policy_is_unnecessary()
6286 …if ((policy->condition_mask & compared_policy->condition_mask) != compared_policy->condition_mask)… in necp_kernel_ip_output_policy_is_unnecessary()
6291 …cy->condition_negated_mask & compared_policy->condition_mask) != (compared_policy->condition_negat… in necp_kernel_ip_output_policy_is_unnecessary()
6295 if (compared_policy->condition_mask & NECP_KERNEL_CONDITION_POLICY_ID && in necp_kernel_ip_output_policy_is_unnecessary()
6296 compared_policy->cond_policy_id != policy->cond_policy_id) { in necp_kernel_ip_output_policy_is_unnecessary()
6300 if (compared_policy->condition_mask & NECP_KERNEL_CONDITION_BOUND_INTERFACE && in necp_kernel_ip_output_policy_is_unnecessary()
6301 compared_policy->cond_bound_interface != policy->cond_bound_interface) { in necp_kernel_ip_output_policy_is_unnecessary()
6305 if (compared_policy->condition_mask & NECP_KERNEL_CONDITION_PROTOCOL && in necp_kernel_ip_output_policy_is_unnecessary()
6306 compared_policy->cond_protocol != policy->cond_protocol) { in necp_kernel_ip_output_policy_is_unnecessary()
6310 if (compared_policy->condition_mask & NECP_KERNEL_CONDITION_LOCAL_START) { in necp_kernel_ip_output_policy_is_unnecessary()
6311 if (compared_policy->condition_mask & NECP_KERNEL_CONDITION_LOCAL_END) { in necp_kernel_ip_output_policy_is_unnecessary()
6312 …icy->cond_local_end, (struct sockaddr *)&compared_policy->cond_local_start, (struct sockaddr *)&co… in necp_kernel_ip_output_policy_is_unnecessary()
6315 } else if (compared_policy->condition_mask & NECP_KERNEL_CONDITION_LOCAL_PREFIX) { in necp_kernel_ip_output_policy_is_unnecessary()
6316 if (compared_policy->cond_local_prefix > policy->cond_local_prefix || in necp_kernel_ip_output_policy_is_unnecessary()
6317 …r *)&policy->cond_local_start, (struct sockaddr *)&compared_policy->cond_local_start, compared_pol… in necp_kernel_ip_output_policy_is_unnecessary()
6323 if (compared_policy->condition_mask & NECP_KERNEL_CONDITION_REMOTE_START) { in necp_kernel_ip_output_policy_is_unnecessary()
6324 if (compared_policy->condition_mask & NECP_KERNEL_CONDITION_REMOTE_END) { in necp_kernel_ip_output_policy_is_unnecessary()
6325 …cy->cond_remote_end, (struct sockaddr *)&compared_policy->cond_remote_start, (struct sockaddr *)&c… in necp_kernel_ip_output_policy_is_unnecessary()
6328 } else if (compared_policy->condition_mask & NECP_KERNEL_CONDITION_REMOTE_PREFIX) { in necp_kernel_ip_output_policy_is_unnecessary()
6329 if (compared_policy->cond_remote_prefix > policy->cond_remote_prefix || in necp_kernel_ip_output_policy_is_unnecessary()
6330 … *)&policy->cond_remote_start, (struct sockaddr *)&compared_policy->cond_remote_start, compared_po… in necp_kernel_ip_output_policy_is_unnecessary()
6336 if (compared_policy->condition_mask & NECP_KERNEL_CONDITION_SCHEME_PORT && in necp_kernel_ip_output_policy_is_unnecessary()
6337 compared_policy->cond_scheme_port != policy->cond_scheme_port) { in necp_kernel_ip_output_policy_is_unnecessary()