The execute call statement (<execute-policy-binding>)

The execute call statement is intended for binding policies to an entity start variant.

All entity start variants must be described in the execute interface that is specified in the execute statement at the top level of the security configuration file. Otherwise there will be an error when compiling the security configuration.

The KasperskyOS Starter Kit uses the execute.execute execute-interface, which contains one entity start variant – the main method without parameters.

Syntax

<execute-policy-binding> ::=

"execute call" <execute-method> "="

<policy-list> ";"

<execute-method> ::=

<execute-method-name> ["(" <arg-name> {"," <arg-name>} ")"]

["[" <parent-sid> "," <child-sid> "]"]

Elements

`<execute-method>`	Start variant with which the list of policies is bound. Consists of the method name and an optional list of start variant arguments in accordance with the IDL description of the imported execute-interface.
`<policy-list>`	List of security policies that will be applied to an event.
`<execute-method-name>`	Name of the execute-interface method with which the list of policies is bound.
`<arg-name>`	Name of the argument.
`<parent-sid>`	Name of the argument containing the identifier of the security context of the entity that starts the configured entity. This argument is implicitly defined and is passed in each interaction event of the entity. The argument name is arbitrarily defined. By this name, the argument can be passed to security policies in the list of arguments.
`<child-sid>`	Name of the argument containing the identifier of the security context of the started (configured) entity. This argument is implicitly defined and is passed in each interaction event of the entity. The argument name is arbitrarily defined. By this name, the argument can be passed to security policies in the list of arguments.

Page top