enter policy

Switches the state of the security domain to the state specified in the policy configuration if such a transition is allowed in the configuration of this family instance.

Type: call policy

Syntax

enter <configuration> (in SID sid)

Parameters

sid	SID of the security domain associated with the finite-state machine.

Policy configuration

<configuration> ::= <state>

Configuration elements

<state>

Name of the state to which the transition must occur.

Returned value

KSS_GRANT, if the transition to the specified state has occurred.

KSS_DENY in the following cases:

• The transition to the specified state has not occurred.
• The finite-state machine has not been initialized for the specified SID.
• The specified SID of the domain is incorrect.

Example

...

policy service_start = service_flow.enter started;

policy service_stop = service_flow.enter stopped;

policy service_finish = service_flow.enter finished;

entity service {

security call start [self] = service_start(self);

security call stop [self] = service_stop(self);

security call finish [self] = service_finish(self);

}

Page top