initialize_transition_check_ policy

Assigns the specified type to the domain, if allowed by the inheritance matrix (transitions).

The check is performed based on the image and type that is assigned to the specified parent.

The image is passed in the policy configuration.

Type: call policy

Syntax

initialize_transition_check_ <configuration> (in SID sid,

in SID parent,

in te_type child_type);

Parameters

sid	SID of the child to which the type is assigned.
parent	SID of the parent from which the type is inherited.
child_type	Type that must be assigned to the child.

Policy configuration

<configuration> ::= <child-image>

<child-image> ::= <image>

Configuration elements

<child-image>

Child image.

Returned value

KSS_GRANT if the type was successfully assigned, otherwise KSS_DENY.

The type will not be defined in the following cases:

• The assigned type is not declared in types.
• The child SID has already been assigned a type within the current family instance.
• The passed image for the parent type is missing from the inheritance matrix.
• The assigned type for the passed image is missing from the inheritance matrix.
• At least one of the specified SIDs is incorrect.

Page top