The policy statement (<policy>)

The policy statement adds the name of the security policy implementation to the declared policy family.

KasperskyOS Starter Kit has two types of security policy implementations:

• A call policy is a function that returns a decision on whether the interaction is "allowed" (KSS_GRANT) or "denied" (KSS_DENY).
• attr policy – function that is used only in choice multiple selection operators (analogous to the switch operator in C). For each value returned by the attr policy, you can specify a set of security policies that have to be applied for such value.

Syntax

<policy> ::= <policy-type> "policy" <policy-name> ";"

<policy-type> ::= "call"|"attr"

Elements

<policy-type>	Type of policy. Permissible values: call attr
<policy-name>	Name of the security policy represented by the declared policy family. The policy name must match one of the methods in the interface specified in the <family-interface> section.

Page top