Solution security policy (security.psl)

The security.psl file is referred to as a solution security policy description or simply solution security policy. This file describes the rules for interaction between entities, the rules for their startup and queries via the security interface, and the utilized audit profiles.

Although the solution security policy description file is named security.psl in the provided examples, it can have any name with the *.psl extension.

The security module (ksm.module) is built based on security.psl. This is done by using the specialized makekss script provided in KasperskyOS Community Edition. In addition to the security.psl file, the files containing static descriptions of all entities, components and interfaces in the solution are required for building the module. The built module is named ksm.module.

To include the security module into the solution image, the module name must be specified in the makeimg script parameters.

If a solution image is built without a security module, the interactions will not be controlled, i.e. all interactions will be allowed.

In this section

Structure of the security.psl file

Rule policies and expression policies

Example of an extremely simple solution security policy

Page top