get {sid : <Sid>, key : <Key>}
It returns the value of the specified key
from the base instance of the table associated with the resource that has the security ID sid
.
It returns a value of the Value
type.
It runs incorrectly in the following cases:
key
is not in the table.sid
is not associated with a table from the tables pool of the StaticMap security model object being used.sid
is out of the permissible range.If the expression runs incorrectly, the Kaspersky Security Module returns the "denied" decision.
Example:
/* An entity of the Server class will receive the "allowed" decision
* from the Kaspersky Security Module by calling the method
* of the Get security interface if the value of key k1
* in the base instance of the table associated with this
* entity is not zero. Otherwise an entity of the
* Server class will receive the "denied" decision from the
* security module by calling the method of the
* Get security interface. */
security src=Server, method=Get {
assert(M.get {sid : src_sid, key : "k1"} != 0)
}
Page top