diff --git secilc-2.5/ChangeLog secilc-2.5/ChangeLog index a803f35..cddfd81 100644 --- secilc-2.5/ChangeLog +++ secilc-2.5/ChangeLog @@ -1,3 +1,5 @@ + * Add documentation and test rule for portcon dccp protocol, from Richard Haines + 2.5 2016-02-23 * Convert DocBook documentation into github markdown, from Yuli Khodorkovskiy * Add documentation for neverallowx rules, from Steve Lawrence diff --git secilc-2.5/docs/cil_network_labeling_statements.md secilc-2.5/docs/cil_network_labeling_statements.md index 183b350..b06dbcc 100644 --- secilc-2.5/docs/cil_network_labeling_statements.md +++ secilc-2.5/docs/cil_network_labeling_statements.md @@ -155,7 +155,7 @@ These examples show named and anonymous [`nodecon`](cil_network_labeling_stateme portcon ------- -Label a udp or tcp port. +Label a udp, tcp or dccp port. **Statement definition:** @@ -175,7 +175,7 @@ Label a udp or tcp port.

protocol

-

The protocol keyword tcp or udp.

+

The protocol keyword tcp, udp or dccp.

port |

@@ -199,3 +199,4 @@ These examples show named and anonymous [`portcon`](cil_network_labeling_stateme (portcon tcp 3333 (unconfined.user object_r unconfined.object levelrange_1)) (portcon udp 4444 (unconfined.user object_r unconfined.object ((s0) level_2))) (portcon tcp (2000 20000) (unconfined.user object_r unconfined.object (systemlow level_3))) + (portcon dccp (6840 6880) (unconfined.user object_r unconfined.object ((s0) level_2)))