flow2 policy family

The flow2 policy family is a special case of a finite-state machine at the security domain level. It lets you define a set of internal states, define rules for transitioning between them, and manage the current state for each security domain.

The flow2 policy family has the following differences from the flow family:

• Each finite-state machine is associated with the specified security domain, not with the system as a whole.
• A finite-state machine is initialized by the init policy, and is finalized by the fini policy. The flow2 policy family does not have a restart policy. To reset a finite-state machine to its initial state, you must first finalize it and then initialize it again.

A declaration of the flow2 family is in the following file:

/opt/KasperskyOS-StarterKit-<version>/sysroot-x86_64-pc-kos/include/kss/server/flow2.cfg

In this section Instance of the flow2 family init policy fini policy state policy enter policy allow policy deny policy

Page top