initialize_transition_check policy

Assigns the specified type to the domain, if allowed by the inheritance matrix (transitions).

The check is performed based on the image and type that is assigned to the specified parent.

The image is passed in the policy arguments.

Type: call policy

Syntax

initialize_transition_check(in SID sid, in SID parent,

in te_image child_image,

in te_type child_type);

Parameters

sid	SID of the child to which the type is assigned.
parent	SID of the parent from which the type is inherited.
child_image	Child image.
child_type	Type that must be assigned to the child.

Returned value

KSS_GRANT if the type was successfully assigned, otherwise KSS_DENY.

The type will not be defined in the following cases:

• The assigned type is not declared in types.
• The child SID has already been assigned a type within the current family instance.
• The passed image for the parent type is missing from the inheritance matrix.
• The assigned type for the passed image is missing from the inheritance matrix.
• At least one of the specified SIDs is incorrect.
• The passed image is not declared in images.

Page top