mirror of
https://github.com/xen-project/xen.git
synced 2026-10-29 02:30:03 +01:00
kfraser@localhost.localdomain
8c706ec28d
This patch changes the XML schema of the ACM policy to require a version and that every conflict set have a name. Every VM label must have one Chinese Wall Type and every resource label one Simple Type Enforcement Type. As a consequence of this some example policies needed to be changed. Also not offering that many configuration options for compiling xen anymore to make things simpler. Signed-off-by: Stefan Berger <stefanb@us.ibm.com>
98 lines
3.3 KiB
XML
98 lines
3.3 KiB
XML
<?xml version="1.0" encoding="UTF-8"?>
|
|
<!-- Auto-generated by ezPolicy -->
|
|
<SecurityPolicyDefinition xmlns="http://www.ibm.com" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.ibm.com ../../security_policy.xsd ">
|
|
<PolicyHeader>
|
|
<PolicyName>example.test</PolicyName>
|
|
<Date>Mon Apr 16 13:13:59 2007</Date>
|
|
<Version>1.0</Version>
|
|
</PolicyHeader>
|
|
|
|
<SimpleTypeEnforcement>
|
|
<SimpleTypeEnforcementTypes>
|
|
<Type>SystemManagement</Type>
|
|
<Type>PepsiCo</Type>
|
|
<Type>CocaCola</Type>
|
|
</SimpleTypeEnforcementTypes>
|
|
</SimpleTypeEnforcement>
|
|
|
|
<ChineseWall priority="PrimaryPolicyComponent">
|
|
<ChineseWallTypes>
|
|
<Type>SystemManagement</Type>
|
|
<Type>PepsiCo</Type>
|
|
<Type>CocaCola</Type>
|
|
<Type>VIOServer</Type>
|
|
</ChineseWallTypes>
|
|
|
|
</ChineseWall>
|
|
|
|
<SecurityLabelTemplate>
|
|
<SubjectLabels bootstrap="SystemManagement">
|
|
<VirtualMachineLabel>
|
|
<Name>SystemManagement</Name>
|
|
<SimpleTypeEnforcementTypes>
|
|
<Type>SystemManagement</Type>
|
|
<Type>PepsiCo</Type>
|
|
<Type>CocaCola</Type>
|
|
</SimpleTypeEnforcementTypes>
|
|
<ChineseWallTypes>
|
|
<Type>SystemManagement</Type>
|
|
</ChineseWallTypes>
|
|
</VirtualMachineLabel>
|
|
|
|
<VirtualMachineLabel>
|
|
<Name>PepsiCo</Name>
|
|
<SimpleTypeEnforcementTypes>
|
|
<Type>PepsiCo</Type>
|
|
</SimpleTypeEnforcementTypes>
|
|
<ChineseWallTypes>
|
|
<Type>PepsiCo</Type>
|
|
</ChineseWallTypes>
|
|
</VirtualMachineLabel>
|
|
|
|
<VirtualMachineLabel>
|
|
<Name>CocaCola</Name>
|
|
<SimpleTypeEnforcementTypes>
|
|
<Type>CocaCola</Type>
|
|
</SimpleTypeEnforcementTypes>
|
|
<ChineseWallTypes>
|
|
<Type>CocaCola</Type>
|
|
</ChineseWallTypes>
|
|
</VirtualMachineLabel>
|
|
|
|
<VirtualMachineLabel>
|
|
<Name>VIO</Name>
|
|
<SimpleTypeEnforcementTypes>
|
|
<Type>CocaCola</Type>
|
|
<Type>PepsiCo</Type>
|
|
</SimpleTypeEnforcementTypes>
|
|
<ChineseWallTypes>
|
|
<Type>VIOServer</Type>
|
|
</ChineseWallTypes>
|
|
</VirtualMachineLabel>
|
|
</SubjectLabels>
|
|
|
|
<ObjectLabels>
|
|
<ResourceLabel>
|
|
<Name>SystemManagement</Name>
|
|
<SimpleTypeEnforcementTypes>
|
|
<Type>SystemManagement</Type>
|
|
</SimpleTypeEnforcementTypes>
|
|
</ResourceLabel>
|
|
|
|
<ResourceLabel>
|
|
<Name>PepsiCo</Name>
|
|
<SimpleTypeEnforcementTypes>
|
|
<Type>PepsiCo</Type>
|
|
</SimpleTypeEnforcementTypes>
|
|
</ResourceLabel>
|
|
|
|
<ResourceLabel>
|
|
<Name>CocaCola</Name>
|
|
<SimpleTypeEnforcementTypes>
|
|
<Type>CocaCola</Type>
|
|
</SimpleTypeEnforcementTypes>
|
|
</ResourceLabel>
|
|
</ObjectLabels>
|
|
</SecurityLabelTemplate>
|
|
</SecurityPolicyDefinition>
|