Flow security model init rule

August 2, 2023

ID ssp_descr_security_models_flow_init

init {sid : <Sid>}

It creates a finite-state machine and associates it with the sid resource. The created finite-state machine has the configuration defined in the settings of the Flow security model object being used.

It returns the "granted" result if an association was created between the finite-state machine and the sid resource.

It returns the "denied" result in the following cases:

  • The sid resource is already associated with a finite-state machine of the Flow security model object being used.
  • The sid value is outside of the permissible range.

Example:

/* A process of the Server class will be allowed to start

* if, at startup initiation, an association will be created

* between this process and the finite-state machine.

* Otherwise the startup of the Server-class process will be denied. */

execute dst=Server {

service_flow.init {sid : dst_sid}

}

Did you find this article helpful?
What can we do better?
Thank you for your feedback! You're helping us improve.
Thank you for your feedback! You're helping us improve.