mirror of
https://github.com/xen-project/xen.git
synced 2026-10-29 02:30:03 +01:00
smh22@firebug.cl.cam.ac.uk
bd471dc416
and security policy-versioning and data structures in the xen subtree
(ACM):
* the very generic tools directory name "policy" is changed to
"security" and the included "policy_tool" to "secpol_tool"
* the single constant POLICY_INTERFACE_VERSION is replaced
by ACM_INTERFACE_VERSION; the security policy headers are
versioned independently since the policy can be supplied
at boot time instead of through the hypervisor interface
Signed-off-by: Reiner Sailer <sailer@watson.ibm.com>
Signed-off-by: Steven Hand <steven@xensource.com>
47 lines
1.2 KiB
XML
47 lines
1.2 KiB
XML
<?xml version="1.0"?>
|
|
<!-- Author: Ray Valdez, rvaldez@us.ibm.com -->
|
|
<!-- example policy type definition -->
|
|
<SecurityPolicySpec
|
|
xmlns="http://www.ibm.com"
|
|
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
|
|
xsi:schemaLocation="http://www.ibm.com SecurityPolicySpec.xsd">
|
|
|
|
<Definition>
|
|
<!-- an example of a simple type enforcement type definition -->
|
|
<Types>
|
|
<TE>LOCAL-management</TE>
|
|
<TE>R-Company-development</TE>
|
|
<TE>S-Company-order</TE>
|
|
<TE>T-Company-advertising</TE>
|
|
<TE>U-Company-computing</TE>
|
|
<!-- TE nondevelopment -->
|
|
</Types>
|
|
|
|
<!-- an example of a chinese wall type definition along with conflict sets-->
|
|
<ChWallTypes>
|
|
<ChWall>Q-Company</ChWall>
|
|
<ChWall>R-Company</ChWall>
|
|
<ChWall>S-Company</ChWall>
|
|
<ChWall>T-Company</ChWall>
|
|
<ChWall>U-Company</ChWall>
|
|
<ChWall>V-Company</ChWall>
|
|
<ChWall>W-Company</ChWall>
|
|
<ChWall>X-Company</ChWall>
|
|
<ChWall>Y-Company</ChWall>
|
|
<ChWall>Z-Company</ChWall>
|
|
</ChWallTypes>
|
|
|
|
<ConflictSet>
|
|
<ChWall>T-Company</ChWall>
|
|
<ChWall>S-Company</ChWall>
|
|
</ConflictSet>
|
|
|
|
<ConflictSet>
|
|
<ChWall>R-Company</ChWall>
|
|
<ChWall>V-Company</ChWall>
|
|
<ChWall>W-Company</ChWall>
|
|
</ConflictSet>
|
|
|
|
</Definition>
|
|
</SecurityPolicySpec>
|